anshumanbh

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

brutesubs

An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

terraform-burp-collaborator

Terraform configuration to build a Burp Private Collaborator Server

LinkFinder

A python script that finds endpoints in JavaScript files

semgrep-rules-poc

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

action-builder

A collection of GitHub Actions that can be used to automate the testing, building, and deployment of custom GitHub Actions using workflows

Amass

In-depth DNS Enumeration and Network Mapping

django-DefectDojo

DefectDojo is a DevSecOps and vulnerability management tool.

goaltdns

A permutation generation tool written in golang

sast-code-repo-poc

SonarSearch

A MongoDB importer and API for Project Sonars DNS datasets

wfuzz

Web application fuzzer

about

A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!

action1

argo-cron

argo-cron

charts

Curated applications for Kubernetes

Drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

example-gcloud

An example workflow, using the GitHub Action, to deploy a static website to an existing Google Kubernetes Engine Cluster

gobuster

Directory/file & DNS busting tool written in Go

goGetBucket

A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

repo-supervisor

Scan your code for security misconfiguration, search for passwords and secrets. :mag:

serverless_toolkit

A collection of useful Serverless functions I use when pentesting

snallygaster

Tool to scan for secret files on HTTP servers

spicesandmix

Spices and Mix Website

SSRFmap

Automatic SSRF fuzzer and exploitation tool

subfinder

SubFinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

WAScan

WAScan - Web Application Scanner