carlosvillasanchez

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

dive

A tool for exploring each layer in a docker image

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

difftastic

a structural diff that understands syntax 🟥🟩

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

bettercap

The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

XSStrike

Most advanced XSS scanner.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

super-linter

Combination of multiple linters to run as a GitHub Action or standalone

Arjun

HTTP parameter discovery suite.

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

unioffice

Pure go library for creating and processing Office Word (.docx), Excel (.xlsx) and Powerpoint (.pptx) documents

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

ysoserial.net

Deserialization payload generator for a variety of .NET formatters

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

judge0

🔥 The most advanced open-source online code execution system in the world.

php-reverse-shell

hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

Nope-Proxy

TCP/UDP Non-HTTP Proxy Extension (NoPE) for Burp Suite.

XSS-Payloads

List of XSS Vectors/Payloads

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

Autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

saml-idp

Simple SAML Identity Provider (IdP) for Node

recon-pipeline

An automated target reconnaissance pipeline.

mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

dnmasscan

A script that can resolve an input file of domains and scan them with masscan

Teleport

The Teleport command is an improvement on the Unix/Linux cd command