iamprbkr

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-osint

:scream: A curated list of amazingly awesome OSINT

aws-cli

Universal Command Line Interface for Amazon Web Services

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

awesome-incident-response

A curated list of tools for incident response

awesome-infosec

A curated list of awesome infosec courses and training resources.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

EVTX-ATTACK-SAMPLES

Windows Events Attack Samples

broken-link-checker

Find broken links, missing images, etc within your HTML.

awesome-cyber-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

InstagramOSINT

An Instagram Open Source Intelligence Tool - Archive

golismero

GoLismero - The Web Knife

SQLiScanner

Automatic SQL injection with Charles and sqlmap api

subscraper

Subdomain and target enumeration tool built for offensive security testing

JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

GTRS

GTRS - Google Translator Reverse Shell

ail-framework

AIL framework - Analysis Information Leak framework

dvws

Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn real world web service vulnerabilities. NOTE: This project is out of date, please use https://github.com/snoopysecurity/dvws-node

WebKit-RegEx-Exploit

WAF-bypass-Cheat-Sheet

Another way to bypass WAF Cheat Sheet (draft)

xcat

XPath injection tool

zBang

zBang is a risk assessment tool that detects potential privileged account threats

sh00t

Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.

twitterBFTD

Twitter Back From The Dead looks in a user tweets history for domain names that are available for registration

XSSFuzzer

XSS Fuzzer is a tool which generates XSS payloads based on user-defined vectors and fuzzing lists.

bounty-domains

List of domains in scope for bug bounties (HackerOne, Bugcrowd, etc.)

waybacktool

A tool to fetch and verify the existence of endpoints from the Wayback Machine API.

xsspwn

Cross-Site-Scripting (XSS) Automatic Scanner

Cybersecurity_Mindmaps

Repository of cybersecurity mindmaps