brnoleal

sslyze

Fast and powerful SSL/TLS scanning library.

cloudmapper

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

ItWasAllADream

A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE

flameshot

Powerful yet simple to use screenshot software :desktop_computer: :camera_flash:

Xss-

Awesome XSS Payloads

Checklists

Red Teaming & Pentesting checklists for various engagements

Bug-Bounty-Wordlists

A repository that includes all the important wordlists used while bug hunting.

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Cheatsheet-God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

purl

hacker101-ctf

Hacker101 CTF Writeup

osint-brazuca

Repositório criado com intuito de reunir informações, fontes(websites/portais) e tricks de OSINT dentro do contexto Brasil.

vega

A visualization grammar.

Firefox-Security-Toolkit

A tool that transforms Firefox browsers into a penetration testing suite

stock-check

Web scrapping python app to check item availability in some retail sellers

StegCracker

Steganography brute-force utility to uncover hidden data inside files

cei-crawler

Crawler para pegar dados do CEI 🤑💰💸

ir

Projeto de calculo de Imposto de Renda em operacoes na bovespa automaticamente. Tags:canal eletronico do investidor, CEI, selenium, bovespa, IRPF, IR, imposto de renda, finance, yahoo finance, acao, fii, etf, python, crawler, webscraping, calculadora ir

yfinance

Download market data from Yahoo! Finance's API

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

secDevLabs

A laboratory for learning secure web and mobile development in a practical manner.

django-otp

A pluggable framework for adding two-factor authentication to Django using one-time passwords.

commix

Automated All-in-One OS Command Injection Exploitation Tool.

pentest-notes

chepy

Chepy is a python lib/cli equivalent of the awesome CyberChef tool.

CyberBattleSim

An experimentation and research platform to investigate the interaction of automated agents in an abstract simulated network environments.

Android-Reports-and-Resources

A big list of Android Hackerone disclosed reports and other resources.

apkleaks

Scanning APK file for URIs, endpoints & secrets.