danzajork

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN information.

badsecrets

A library for detecting known secrets across many web frameworks

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

Burp-Montoya-Utilities

A collection of utilities for building extensions using Burp's Montoya API

burpsuite-bambda-filters

CloudRecon

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

GAP-Burp-Extension

Burp Extensions

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

GBA_ME

UE GBA_ME Emulator

ipranges

🔨 List all IP ranges from: Google (Cloud & GoogleBot), Bing (Bingbot), Amazon (AWS), Microsoft (Azure), Oracle (Cloud), GitHub, Facebook (Meta), OpenAI (GPTBot) and other with daily updates.

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

jsmon

a javascript change monitoring tool for bugbounties

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

LinkFinder

A python script that finds endpoints in JavaScript files

LookMark

A browser bookmark to show hidden fields and enable disabled fields on a web page

noir

Attack surface detector that identifies endpoints by static analysis

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

pwndoc

Pentest Report Generator

python-ipy

IPy are a Python class and tools for handling of IPv4 and IPv6 addresses and networks. It is similar to Net::IP Perl module.

quickcert

A better way of querying certificate transparency logs

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

tinydns

Tiny embeddable dns server

tmobile-api-security-lib

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

uncover

Quickly discover exposed hosts on the internet using multiple search engines.

vulnerability-rating-taxonomy

Bugcrowd’s baseline priority ratings for common security vulnerabilities

waymore

Find way more from the Wayback Machine!

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

XnlReveal

A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements.