h4ckdi

Grafana-CVE-2021-43798

Grafana Unauthorized arbitrary file reading vulnerability

aemscan

Adobe Experience Manager Vulnerability Scanner

aem-hacker

firing-range

XSStrike

Most advanced XSS scanner.

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

introduction-to-bash-scripting

Free Introduction to Bash Scripting eBook

lsassy

Extract credentials from lsass remotely

pagodo

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

ens-xss

4-ZERO-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

Wordlist404

Small but effective wordlist for brute-forcing and discovering hidden things.

jadx

Dex to Java decompiler

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

Cheatsheet-God

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

Resources

Resources for penetration testing and bug-bounty

Dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

urlbuster

Powerful mutable web directory fuzzer to bruteforce existing and/or hidden files or directories.

gitjacker

🔪 :octocat: Leak git repositories from misconfigured websites

Fast-Google-Dorks-Scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

sshenum

OpenSSH 7.2p2 users enumeration python

cve-2018-15473

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

notify

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

gf

A wrapper around grep, to help you grep for things

Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

subzy

Subdomain takeover vulnerability checker

AlDente-Charge-Limiter

macOS menubar tool to set Charge Limits and prolong battery lifespan