coffee-90

esp8266_deauther

Affordable WiFi hacking platform for testing and learning

awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

server-scanner

Server Scanner detect rootkit and backdoor

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

php-malware-finder

Bashfuscator

A fully configurable and extendable Bash obfuscation framework. This tool is intended to help both red team and blue team.

psudohash

Generates millions of keyword-based password mutations in seconds.

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication

BugBountyScanner

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

SecurityTesting

Th3inspector

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

wifijammer

Continuously jam all wifi clients/routers

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

OffSec-Reporting

Offensive Security OSCP, OSWP, OSEP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA Exam and Lab Reporting / Note-Taking Tool

CEH-Exam-Questions

Planning To Take Certified Ethical Hacker (CEH)? Here are github repo with 125 questions and answers to help you prep for the test

MobileHackingCheatSheet

Basics on commands/tools/info on how to assess the security of mobile applications

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

weaponised-XSS-payloads

XSS payloads designed to turn alert(1) into P1

Web-App-Pentest-Checklist

A OWASP Based Checklist With 500+ Test Cases

bypass-url-parser

bypass-url-parser

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

AwesomeXSS

Awesome XSS stuff

KLogger

Remote persistent 🔑Logger for Windows and Linux

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

bug-bounty-platforms

A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.