ddervosj

uroboros

A GNU/Linux monitoring and profiling tool focused on single processes.

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

SecUtils

Random utilities from my security projects that might be useful to others

slackcat

CLI utility to post files and command output to slack

gitjacker

🔪 :octocat: Leak git repositories from misconfigured websites

CeWL

CeWL is a Custom Word List Generator

JSFScan.sh

Automation for javascript recon in bug bounty.

AFL

american fuzzy lop - a security-oriented fuzzer

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Arjun

HTTP parameter discovery suite.

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

droopescan

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

wordlistgen

Quickly generate context-specific wordlists for content discovery from lists of URLs or paths

Findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

github-search

A collection of tools to perform searches on GitHub.

subfinder

Fast passive subdomain enumeration tool.

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

httprebind

Automatic tool for DNS rebinding-based SSRF attacks

gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

InputScanner

keyFinder

Keyfinder🔑 is a tool that let you find keys while surfing the web!

marker

The terminal command palette

Arjun

HTTP parameter discovery suite.

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

Awesome-Asset-Discovery

List of Awesome Asset Discovery Resources

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

LazyRecon

An automated approach to performing recon for bug bounty hunting and penetration testing.