Amiirjr

ScriptView-Burp-Extension

A Burp Extension that makes it easier to view all script code on a Response.

jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

Burp-Suite-Pro-Scan-Profiles

Custom scan profiles for use with Burp Suite Pro

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

gobuster

Directory/File, DNS and VHost busting tool written in Go

grpcurl

Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers

project-layout

Standard Go Project Layout

android-secure-coding

40k-nuclei-templates

40,000+ Nuclei templates for security scanning and detection across diverse web applications and services

vulnerable-rest-api

A vulnerable RESTful application written in Node and React based on OWASP API security top 10 2023 edition.

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

LookMark

A browser bookmark to show hidden fields and enable disabled fields on a web page

H1Reports

URLInspector

A tool to monitor websites

offbyslash-django-dumper

A proof of concept to dump Django website's source code affected by NGINX's off-by-slash alias directive misconfiguration.

AutoSubRecon

bash script for automating subdomain enumeration process either passive or active

wapalyzer

🌐 Identify the technologies powering any website. This is a fork of the now deleted Wappalyzer project by @AliasIO and community.

CloudScraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

awesome-appsec

A curated list of resources for learning about application security

learn-regex

Learn regex the easy way

awesome-vulnerable-apps

Awesome Vulnerable Applications

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

vulnerable-sso

vulnerable single sign on

Facebook-BugBounty-Writeups

Collection of Facebook Bug Bounty Writeups

cli

Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)

IPFuscator

IPFuscator - A tool to automatically generate alternative IP representations

bbot

A recursive internet scanner for hackers.

Anubis-DB

Database to store previously found subdomains

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more