ariesike

gf

A wrapper around grep, to help you grep for things

apkleaks

Scanning APK file for URIs, endpoints & secrets.

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

interactsh

An OOB interaction gathering server and client library

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

subfinder

Fast passive subdomain enumeration tool.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

wordlistgen

Quickly generate context-specific wordlists for content discovery from lists of URLs or paths

CVE-2022-1388

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE

grpool

Lightweight Goroutine pool

pterm

✨ #PTerm is a modern Go module to easily beautify console output. Featuring charts, progressbars, tables, trees, text input, select menus and much more 🚀 It's completely configurable and 100% cross-platform compatible.

smartcheck

SmartCheck – a static analysis tool that detects vulnerabilities and bugs in Solidity programs (Ethereum-based smart contracts).

martian

Martian is a library for building custom HTTP/S proxies

package-analysis

Open Source Package Analysis

warpgate

Smart SSH, HTTPS and MySQL bastion that requires no additional client-side software

cve

Gather and update all available and newest CVEs with their PoC.

purple-team-exercise-framework

Purple Team Exercise Framework

spring4shell-scan

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

ecapture

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

dog

A command-line DNS client.

hoppscotch

Open source API development ecosystem - https://hoppscotch.io (open-source alternative to Postman, Insomnia)

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Web-Attack-Cheat-Sheet

Web Attack Cheat Sheet

go-pretty

Table-writer and more in golang!

splunk_pentest_cheatsheet