bsysop

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

IpLogger

jwt-hack

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

reflection-public

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

asvs

A simple web app that helps developers understand the ASVS requirements.

awesome-bbht

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain. Feel free to fork, and add your own tools.

awesome-cheatsheet

:beers: awesome cheatsheet

awesome-industrial-control-system-security

A curated list of resources related to Industrial Control System (ICS) security.

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

awesome-web-security

🐶 A curated list of Web Security materials and resources.

burp-piper-custom-scripts

Custom scripts for the PIPER Burp extensions.

ditto

A tool for IDN homograph attacks and detection.

extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

ffuf

Fast web fuzzer written in Go

GitDorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

h8mail

Email OSINT & Password breach hunting tool, locally or using premium services. Supports chasing down related email

httpie

As easy as /aitch-tee-tee-pie/ 🥧 Modern, user-friendly command-line HTTP client for the API era. JSON support, colors, sessions, downloads, plugins & more. https://twitter.com/httpie

knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

kubernetes-goat

Kubernetes Goat is "Vulnerable by Design" Kubernetes Cluster. Designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security.

OneListForAll

Rockyou for web fuzzing

PacketProxy

A local proxy written in Java

SecretScanner

Find secrets and passwords in container images and file systems

shell-bot

:robot: Telegram bot that executes commands and sends the live output

Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

trivy

A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

uddup

Urls de-duplication tool for better recon.

unfurl

Pull out bits of URLs provided on stdin

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!