dhivyachan

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

knock

Knock Subdomain Scan

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

subdomain-takeover

Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

aquatone

A Tool for Domain Flyovers

Defensive-S3-Buckets

Defensive S3 Bucket Squating

dnscan

opencanary

Modular and decentralised honeypot

domained

Multi Tool Subdomain Enumeration

simplydomain

Subdomain brute force focused on speed and data serialization

Sublist3r

Fast subdomains enumeration tool for penetration testers

aws-lambda-go

Libraries, samples and tools to help Go developers develop AWS Lambda functions.

hubble

Hubble is a modular, open-source security compliance framework. The project provides on-demand profile-based auditing, real-time security event notifications, alerting, and reporting.

Project-Ideas

A place to discuss potential projects for students of the ISIS Lab.

Bluto

DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking

Anubis

Subdomain enumeration and information gathering tool

dnsrecon

DNS Enumeration Script

XDiFF

Extended Differential Fuzzing Framework