annsmarmalarki

hack-Twitter

Bypass the credibility page for Twitter Crack username and a lot more

APT_REPORT

Interesting APT Report Collection And Some Special IOC

dumpxss

Scanner Tool For XSS Vulnerability

PwnXSS

PwnXSS: Vulnerability (XSS) scanner exploit

awesome-bugbounty-builder

Awesome Bug bounty builder Project

XSS-Scanner

XSS scanner that detects Cross-Site Scripting vulnerabilities in website by injecting malicious scripts

curl

A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, POP3, POP3S, RTMP, RTMPS, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

Path_Travelsal_Payload_List

Path Traversal Vulnerability Payload List

top-100-passwords

A list of the top 100 most frequent passwords that were used in SSH attempts to try gain access to my VPS.

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

Responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Hunting-Certificates-And-Servers

Presentation presented at DEFCON 27 PHV

sslScrape

SSLScrape | A scanning tool for scaping hostnames from SSL certificates.

knock

Knock Subdomain Scan

domain

Setup script for Regon-ng

osintui

OSINT from your favorite services in a friendly terminal user interface - integrations for Virustotal, Shodan, and Censys

Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

Gf-Patterns-Collection

HUNT

Source2URL

Parse source code directories and output list of URLs that are then sent through a proxy.

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

LinkFinder

A python script that finds endpoints in JavaScript files

Papaya

NoSQL Injection Tool to bypass login forms & extract usernames/passwords using regular expressions.

bypass-firewalls-by-DNS-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

w3af

w3af: web application attack and audit framework, the open source web vulnerability scanner.

CloudFail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

hacks

A collection of hacks and one-off scripts

Arjun

HTTP parameter discovery suite.

dirsearch

Web path scanner