egoolsen

freeCodeCamp

The https://freeCodeCamp.com open source codebase and curriculum. Learn to code and help nonprofits.

XSStrike

Most advanced XSS scanner.

URLCADIZ

A simple script to generate a hidden url for social engineering.

pwncat

Fancy reverse and bind shell handler

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Ciphey

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

owtf

Offensive Web Testing Framework (OWTF), is a framework which tries to unite great tools and make pen testing more efficient http://owtf.org https://twitter.com/owtfp

resources

things I found useful

BloodHound

Six Degrees of Domain Admin

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

MASTG-Hacking-Playground

igoat

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

XAttacker

X Attacker Tool ☣ Website Vulnerability Scanner & Auto Exploiter

pypykatz

Mimikatz implementation in pure Python

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

awesome-piracy

A curated list of awesome warez and piracy links

SMF

Social media hacking

Pentest-practice

A curated list of hacking environments where you can train your cyber skills legally and safely

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

CrackMapExec

A swiss army knife for pentesting networks

CredCrack

A fast and stealthy credential harvester

fluxion

WiFi Cracking Tool (Using Evil Twin Attack) With Some Modification. (Only For Legal Purposes)

awesome-piracy

A curated list of awesome warez and piracy links

bughunter

Tools for BugHunting

hacktronian

Tools for Pentesting

burpsuite

BurpSuite Pro, Plugins and Payloads

FacebookOSINT

FBOSINT - A tool to replace facebook graph search

BurpSuite-Asset_Discover

Burp Suite extension to discover assets from HTTP response.

Scrummage

A Holistic OSINT and Threat Hunting Platform

osint-scraper

Social Recon