annsmarmalarki

check-log4j

To determine if a host is vulnerable to log4j CVE‐2021‐44228

look4jar

Looking for JAR files that are vulnerable to Log4j RCE (CVE‐2021‐44228)?

log4JFrida

log4jscanner

A log4j vulnerability filesystem scanner and Go package for analyzing JAR files.

Log4Shell

4-ZERO-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

403bypass

JNDI-Exploit-Kit

JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP Server, RMI Server and LDAP Server to exploit java web apps vulnerable to JNDI Injection）

webkiller

Tool Information Gathering Write By Python.

D-TECT-1

D-TECT - Pentesting the Modern Web

ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers.

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

sql-injection-payload-list

🎯 SQL Injection Payload List

hackerone-reports

Top disclosed reports from HackerOne

SubDomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

gospider

Gospider - Fast web spider written in Go

RegHex

A collection of regexes for every possbile use

js-miner

This tool tries to find interesting stuff inside static files; mainly JavaScript and JSON files.

Trufflehog-Chrome-Extension

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

AllVideoPocsFromHackerOne

This script grab public report from hacker one and make some folders with poc videos

Faitagram

(Doesn't work anymore)

ighack

Hack Instagram From Termux With Help of Tor

pycrack

Advanced Password Cracking Tool with support for Bruteforce Attacks, Dictionary Attacks, Random Attacks. This tool is capable of cracking files and hashes like PDF, Zip, MS Excel, MS World, MS Power Point, MD5, Sha1, Sha224, Sha256, Sha384, Sha512, Blake2B, Blake2S.

BruteForce

A powerful password Brute Force password cracker for pentesting.

Devil

Devil is a tool that is basically made for facebook to Hack target accounts , BruteForce Attack , grab friendlist accounts , yahoo chacker , Facbook Friend information gathering tool , auto likes reactions & much more i hope you enjoy this tool i'm not responsible if you use this tool for any illegal purpose

socialbrute

It attempts to crack social networks using a brute force dictionary attack.

XAttackProV30

XAttacker Tool PRO V30 Website Vulnerability Scanner & Auto Exploiter

instahack

instahack is a bash & python based script which is officially made to test password strength of Instagram account from termux and kali with bruteforce attack and. it based on tor This tool works on both rooted Android device and Non-rooted Android device. Best Tool For Instagram Bruteforce hacking Tool By Waseem Akram. Made in Bash & python. This is an official repository of instahack

pydictor

A powerful and useful hacker dictionary builder for a brute-force attack