kharaone

assetfinder

Find domains and subdomains related to a given domain

Auto_Wordlists

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Blind-XSS-Manager

Never forget where you inject.

Burp-Hunter

XSS Hunter Burp Plugin

dastardly-on-demand

detectify-cves

Find CVEs that don't have a Detectify modules.

dontgo403

Tool to bypass 40X response codes.

engineering-progression

Careers and progression for engineers in the CTO organisation.

gitrob

Reconnaissance tool for GitHub organizations

guidtool

A tool to inspect and attack version 1 GUIDs

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

interactsh-web

Web dashboard for Interactsh client

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

next.js

The React Framework

nsec3map

a tool to enumerate the resource records of a DNS zone using its DNSSEC NSEC or NSEC3 chain

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-burp-plugin

Nuclei plugin for BurpSuite

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

of-CORS

pwn-machine

The Pwning Machine

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

sample-html

⛵ App Platform sample HTML application.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com

SSRFmap

Automatic SSRF fuzzer and exploitation tool

toxssin

An XSS exploitation command-line interface and payload generator.

transformations

unwebpack-sourcemap

Extract uncompiled, uncompressed SPA code from Webpack source maps.

xss-hunter