bsysop

servicenow

ServiceNow widge-simple-list misconfiguration scanner

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

IpLogger

reflection-public

sj

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

asvs

A simple web app that helps developers understand the ASVS requirements.

awesome-cheatsheet

:beers: awesome cheatsheet

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

awesome-web-security

🐶 A curated list of Web Security materials and resources.

CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC

CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator

extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

ffuf

Fast web fuzzer written in Go

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

httpie

As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie

knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

PipeCheck

poc-empty-repo

rootAVD

Script to root AVDs running with QEMU Emulator from Android Studio

SecretScanner

Find secrets and passwords in container images and file systems

shell-bot

:robot: Telegram bot that executes commands and sends the live output

uddup

Urls de-duplication tool for better recon.

unfurl

Pull out bits of URLs provided on stdin

waf-bypass

Check your WAF before an attacker does

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!