GerbenJavado

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Ghost

Independent technology for modern publishing, memberships, subscriptions and newsletters.

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

Sublist3r

Fast subdomains enumeration tool for penetration testers

gitrob

Reconnaissance tool for GitHub organizations

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

aquatone

A Tool for Domain Flyovers

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

security-txt

A proposed standard that allows websites to define security policies.

mariana-trench

A security focused static analysis tool for Android and Java applications.

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

XSS-Radar

likert

Package to analyze likert based items.

megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

FileChangeMonitor

Continuous monitoring for JavaScript files

reddit-background

Set your Linux and Mac OS X desktop background to images pulled from Reddit

S3Cruze

All-in-one AWS S3 bucket tool for pentesters.

ReconDashboard

Dashboard containing various recon tools