antoniodvr

Directory-Traversal-Payloads

List of Directory Traversal/LFI Payloads Scraped from the Internet

OpenRedireX

A fuzzer for detecting open redirect vulnerabilities

4-ZERO-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

nomore403

Tool to bypass 403/40X response codes.

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

LinkFinder

A python script that finds endpoints in JavaScript files

trufflehog

Find, verify, and analyze leaked credentials

RedTeam-Resources

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

CVE-2024-21893.py

CVE-2024-21893: SSRF Vulnerability in Ivanti Connect Secure

interactsh

An OOB interaction gathering server and client library

bypass-403

A simple script just made for self use for bypassing 403

gospider

Gospider - Fast web spider written in Go

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

FavFreak

Making Favicon.ico based Recon Great again !

ffuf

Fast web fuzzer written in Go

CVE-2024-21887

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

simple-php-web-shell

Tiny PHP Web shell for executing unix commands from web page

403bypasser

anew

A tool for adding new lines to files, skipping duplicates

assetfinder

Find domains and subdomains related to a given domain

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

kxss

This a adaption of tomnomnom's kxss tool with a different output format

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

subjack

Subdomain Takeover tool written in Go

Gxss

A tool to check a bunch of URLs that contain reflecting params.

gitrob

Reconnaissance tool for GitHub organizations