leetIbrahim

jsluicepp

jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

uff

unleashed ffuf

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

apkurlgrep

Extract endpoints from APK files

knoxsser

A powerful bash script for massive XSS scanning leveraging Brute Logic's KNOXSS API

Leaked-Credentials

how to look for Leaked Credentials !

privatecollaborator

A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate

Depix

Recovers passwords from pixelized screenshots

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

changedetection.io

The best and simplest free open source web page change detection, website watcher, restock monitor and notification service. Restock Monitor, change detection. Designed for simplicity - Simply monitor which websites had a text change for free. Free Open source web page change detection, Website defacement monitoring, Price change notification

yesitsme

Simple OSINT script to find Instagram profiles by name and e-mail/phone

sqlifinder

SQL Injection Vulnerability Scanner made with Python

fallparams

Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

bbFuzzing.txt

programs-watcher

A Python script designed to monitor bug bounty programs for any changes and promptly notify users.

rce-finder

A tool to find good RCE

JSNotify

pathbuster

A path-normalization pentesting tool.

telegram-nearby-map

Discover the location of nearby Telegram users 📡🌍

weird_proxies

Reverse proxies cheatsheet

XSSTRON

Electron JS Browser To Find XSS Vulnerabilities Automatically

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Dependency-Confusion

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

VhostFinder

Identify virtual hosts by similarity comparison

FuzzyGuard

domainCollector

Simple tool to gather domains from crt.sh using the organization name

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

FBI-tools

🕵️ OSINT Tools for gathering information and actions forensics 🕵️