jayeshjodhawat

gourlex

Gourlex is a simple tool that can be used to extract URLs and paths from web pages.

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

teler

Real-time HTTP Intrusion Detection

SpiderSuite

Advance web security spider/crawler

GAP-Burp-Extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

x8

Hidden parameters discovery suite

wordlists

Real-world infosec wordlists, updated regularly

gotator

Gotator is a tool to generate DNS wordlists through permutations.

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

nuclei-wordfence-cve

The EXCLUSIVE Collection of 37,000+ Nuclei templates based on Wordfence intel. Daily updates for bulletproof WordPress security.

mksub

Generate tens of thousands of subdomain combinations in a matter of seconds

k8sgpt

Giving Kubernetes Superpowers to everyone

diagrams

:art: Diagram as Code for prototyping cloud system architectures

novu

Open-Source Notification Platform. Embeddable Notification Center, E-mail, Push and Slack Integrations.

WordList

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

guide

Kubernetes clusters for the hobbyist.

system-design-primer

Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

sre-interview-prep-guide

Site Reliability Engineer Interview Preparation Guide

learn-cantrill-io-labs

Standard and Advanced Demos for learn.cantrill.io courses

bypass-url-parser

bypass-url-parser

OneForAll

OneForAll是一款功能强大的子域收集工具

OneListForAll

Rockyou for web fuzzing

CCSKv4

Certificate of Cloud Security Knowledge exam preparation kit

Cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

ChopChop

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

devops-exercises

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

Red-Teaming-Toolkit

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

pentest

:no_entry: offsec batteries included