jsav0

dive

A tool for exploring each layer in a docker image

docker-cheat-sheet

Docker Cheat Sheet

sshuttle

Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.

subfinder

Fast passive subdomain enumeration tool.

gobuster

Directory/File, DNS and VHost busting tool written in Go

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

aquatone

A Tool for Domain Flyovers

apkleaks

Scanning APK file for URIs, endpoints & secrets.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

knock

Knock Subdomain Scan

Findomain

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

subjack

Subdomain Takeover tool written in Go

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sslsplit

Transparent SSL/TLS interception

github-search

A collection of tools to perform searches on GitHub.

weaponised-XSS-payloads

XSS payloads designed to turn alert(1) into P1

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

go-dork

The fastest dork scanner written in Go.

unfurl

Pull out bits of URLs provided on stdin

arp-scan

The ARP Scanner

http-request-smuggler

github-subdomains

Find subdomains on GitHub.

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

Nmap-Tools

SpiderLabs shared Nmap Tools

tiscripts

Turbo Intruder Scripts

wraith

Uncover forgotten secrets and bring them back to life, haunting security and operations teams.

http-request-smuggling

HTTP request smuggling examples