ariesike

hoppscotch

Open source API development ecosystem - https://hoppscotch.io (open-source alternative to Postman, Insomnia)

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

subfinder

Fast passive subdomain enumeration tool.

ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

cve

Gather and update all available and newest CVEs with their PoC.

dog

A command-line DNS client.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

pterm

✨ #PTerm is a modern Go module to easily beautify console output. Featuring charts, progressbars, tables, trees, text input, select menus and much more 🚀 It's completely configurable and 100% cross-platform compatible.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Web-Attack-Cheat-Sheet

Web Attack Cheat Sheet

warpgate

Smart SSH, HTTPS and MySQL bastion that requires no additional client-side software

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

interactsh

An OOB interaction gathering server and client library

SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

go-pretty

Table-writer and more in golang!

martian

Martian is a library for building custom HTTP/S proxies

gf

A wrapper around grep, to help you grep for things

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

grpool

Lightweight Goroutine pool

package-analysis

Open Source Package Analysis

spring4shell-scan

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

purple-team-exercise-framework

Purple Team Exercise Framework

smartcheck

SmartCheck – a static analysis tool that detects vulnerabilities and bugs in Solidity programs (Ethereum-based smart contracts).

wordlistgen

Quickly generate context-specific wordlists for content discovery from lists of URLs or paths

auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

splunk_pentest_cheatsheet