dmatrix's repositories
altdns
Generates permutations, alterations and mutations of subdomains and then resolves them
uro
declutters url lists for crawling/pentesting
LinkFinder
A python script that finds endpoints in JavaScript files
shodan-bulk-ip-query
Bulk hostname lookup using shodan
gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
BurpSuite_403Bypasser
Burpsuite Extension to bypass 403 restricted directory
verizon-oauth-token
This is a simple solution to request a valid token from Verizon Media
Bug-Bounty-Toolz
BBT - Bug Bounty Tools
axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
add-custom-header
A Burp Suite extension to add a custom header (e.g. JWT)
httpx
httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.
nuclei
Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.
SubDomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
subfinder
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
wagtail
A Django content management system focused on flexibility and user experience
scrapts
Scrapts Scrapts Scrapts
subtake
Automatic finder for subdomains vulnerable to takeover. Written in Go, based on @haccer's subjack.
jaeles
The Swiss Army knife for automated Web Application Testing
subjack
Subdomain Takeover tool written in Go
Gf-Patterns
GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
node-js-getting-started
Getting Started with Node on Heroku
domains-from-csp
A script to extract domain names from Content Security Policy(CSP) headers
big-list-of-naughty-strings
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.