kholi0o

Spring-Boot-Vulnerability

Python_dependency_confusion_attacks

Python package dependency confusion vulnerability POC. Impact this vulnerability is Remote code execution (RCE)

pwnedOrNot

OSINT Tool for Finding Passwords of Compromised Email Addresses

pwndb

pwndb is a tool that looks for leaked passwords from a dark web breach database given a user or domain.

nessus

nessus crack for docker

crimson

Web Application Security Testing Tools

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Sparty-2.0

An MS Sharepoint and Frontpage Auditing Tool

shortscan

An IIS short filename enumeration tool

AcuAutomate

Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.

TInjA

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

mitmproxy2swagger

Automagically reverse-engineer REST APIs via capturing traffic

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

thefuck

Magnificent app which corrects your previous console command.

EmailHarvester

Email addresses harvester

pwndb

Search for leaked credentials

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

SwiftnessX

A cross-platform note-taking & target-tracking app for penetration testers.

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

XSStrike

Most advanced XSS scanner.

freq

This is go CLI tool for send fast Multiple get HTTP request.

Jira-Lens

Fast and customizable vulnerability scanner For JIRA written in Python

Redis-Server-Exploit

This will give you shell access on the target system if redis server is not configured properly and faced on the internet without any authentication

Bug-Bounty-Wordlists

A repository that includes all the important wordlists used while bug hunting.

rush

A cross-platform command-line tool for executing jobs in parallel

CRLJ

The repository is a valuable resource for individuals looking to enhance their knowledge and skills in cybersecurity. It provides in-depth materials and guides for various cybersecurity domains.

S3-Bucket-Scanner

Scan for open AWS S3 buckets and dump the contents (cross platform)

trufflehog

Find and verify secrets

hakscale

Distribute ordinary bash commands over many systems