angeldebone

pspy

Monitor linux processes without root permissions

lakera

notify

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

Bug_Bounty_writeups

BUG BOUNTY WRITEUPS - OWASP TOP 10 🔴🔴🔴🔴✔

baserunner

A tool for exploring Firebase datastores.

Facebook-BugBounty-Writeups

Collection of Facebook Bug Bounty Writeups

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

bandit

Bandit is a tool designed to find common security issues in Python code.

tew

A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.

jazzer

Coverage-guided, in-process fuzzing for the JVM

postmaniac

Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces

burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities, and enables running traffic-based analysis of any type.

SpiderSuite

Advance web security spider/crawler

tlsx

Fast and configurable TLS grabber focused on TLS based data collection.

offensive-security-practices-cheatsheet

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

offensive-ai-compilation

A curated list of useful resources that cover Offensive AI.

sql-injection-payload-list

🎯 SQL Injection Payload List

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Arjun

HTTP parameter discovery suite.

XSStrike

Most advanced XSS scanner.

s3cXSSer

This extension will help you to detect GET/POST based XSS vulnerability in any website easily

uro

declutters url lists for crawling/pentesting

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN information.

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

nexfil

OSINT tool for finding profiles by username

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

gf

A wrapper around grep, to help you grep for things

metabigor

OSINT tools and more but without API key