VRKT

Smap

a drop-in replacement for Nmap powered by shodan.io

Bolt

CSRF Scanner

Hash-Buster

Crack hashes in seconds.

be-a-hacker

roadmap for a self-taught hacker

Striker

Striker is an offensive information and vulnerability scanner.

Photon

Incredibly fast crawler designed for OSINT.

Arjun

HTTP parameter discovery suite.

XSStrike

Most advanced XSS scanner.

awesome-pentest-checklist

A comprehensive, step-by-step penetration testing checklist for ethical hackers. Covers pre-engagement, information gathering, analysis, exploitation, reporting, and more. Ideal for both beginners and pros.

hackthebox

My WriteUps for HackTheBox CTFs, Machines, and Sherlocks.

Sn1per

Attack Surface Management Platform

ctf-katana

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

BugBountyToolkit

A multi-platform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

awesome-bugbounty-tools

A curated list of various bug bounty tools

Bug-bounty

Ressources for bug bounty hunting

Web-App-Pentest-Checklist

A OWASP Based Checklist With 500+ Test Cases

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

penetration-testing-cheat-sheet

Work in progress...

ultimate-pentest-tools-list

The following include a list of pentest tools available across the web. Many are free and even open source, others are premium tools and require a monthly or yearly subscription. We’ll note when pentest tools aren’t free.

Penetration-Testing-Tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

Pentest-Tools

PentestTools

Awesome Pentest Tools Collection

nikto

Nikto web server scanner

useragent

Curated list of categorized User Agents

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

openvas-scanner

This repository contains the scanner component for Greenbone Community Edition.

OSTE-Meta-Scan

The OSTE meta scanner is a comprehensive web vulnerability scanner that combines multiple DAST scanners, including Nikto Scanner, ZAP, Nuclei, SkipFish, and Wapiti.

ride

REST API Automation framework for functional, integration, fuzzing, and performance testing