ift3k

0d1n

Tool for automating customized attacks against web applications. Fully made in C language with pthreads, it has fast performance.

aem-hacker

AllVideoPocsFromHackerOne

This script grab public report from hacker one and make some folders with poc videos

awesome-bugbounty-tools

A curated list of various bug bounty tools

Awesome-Cloud-PenTest

awesome-vulnerable-apps

Awesome Vulnerable Applications

bloggingCMS

A simple blogging CMS

bruteforce-database

Bruteforce database

bugbountytools-methodology

Bug Bounty Tools used on Twitch - Recon

CVE-2020-11579

Exploit code for CVE-2020-11579, an arbitrary file disclosure through the MySQL client in PHPKB

CVE-2022-1388-checker

Simple script realizado en bash, para revisión de múltiples hosts para CVE-2022-1388 (F5)

Firefox-Security-Toolkit

A tool that transforms Firefox browsers into a penetration testing suite

folloween

A laravel social media

hackerone-reports

Top disclosed reports from HackerOne

HowToHunt

Tutorials and Things to Do while Hunting Vulnerability.

Ipsubnique

A script for finding unique IP addresses from supplied subdomain list

Log4j-RCE-Scanner

Remote command execution vulnerability scanner for Log4j.

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

loghub

A large collection of system log datasets for log analysis research

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

myStarter

I start with this template settings when starting any new project

NoiseTorch

Real-time microphone noise suppression on Linux.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shocker

A tool to find and exploit servers vulnerable to Shellshock

sslscan

sslscan tests SSL/TLS enabled services to discover supported cipher suites

tanj1m.github.io

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

todos