designerscoders

XSS

OversecuredVulnerableiOSApp

Oversecured Vulnerable iOS App

MXS

A powerful asynchronous XSS scanner supporting up to 1,500 concurrent requests.

certainly

Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scenarios.

weapons4pentester

:hocho: this repo contains required files for web application pentests

xss_vibes

A modern tool written in Python that automates your xss findings.

BugBountyLearningResources

Bug Bounty Learning Resources i mentioned on My Blog at http://whoami.securitybreached.org/

ParamEnumerator

Hunts for params.

PizzaHunt

Scans for indications of an XSS, Oracle SQLi and filters out words containing MySQL.

XSS-Automation

sqli-dojo-docker

A demo PHP application used to exercise SQL injection techniques in a safe, local Docker environment

CRLFsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

cero

Scrape domain names from SSL certificates of arbitrary hosts

eventlistener-xss-recon

google-dorks-bug-bounty

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

css-scrollbar-attack

PoC for leaking text nodes via CSS injection

nuclei-templates

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website

apidetector

APIDetector: Efficiently scan for exposed Swagger endpoints across web domains and subdomains. Supports HTTP/HTTPS, multi-threading, and flexible input/output options. Ideal for API security testing.

XSS-Bypass-Filters

EvenBetter

EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎

Priv8-Nuclei-Templates

My Priv8 Nuclei Templates

awesome-web-hacking

A list of web application security

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

BSQLi

timebased blind sqli with 99% success rate

gungnir

CT Log Scanner

back-me-up

This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.

NucleiScanner

NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications

bbrf-server

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

Path-Traversal-Scanner