m4ll0k

SecretFinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

BBTz

BBT - Bug Bounty Tools (examples💡)

Atlas

Quick SQLMap Tamper Suggester

infoga

Infoga - Email OSINT SaaS - https://infoga.io

autobreakpointer

Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code

OneListForAll

Rockyou for web fuzzing

PayloadsAllThePDFs

PDF Files for Pentesting

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti and Immunefi!

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

gsd-database

Global Security Database

cve

Gather and update all available and newest CVEs with their PoC.

Holmes

Website FingerPrint Recognition

reapoc

OpenSource Poc && Vulnerable-Target Storage Box.

youzai

基于Golang开发的WEB漏洞扫描器

XSS-Bypass-Filters

LinkFinder

A python script that finds endpoints in JavaScript files

fingerprint

各种工具指纹收集分享

FingerprintHub

侦查守卫(ObserverWard)的指纹库

HackerzHat

intrigue-core

Discover Your Attack Surface!

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

cve-schema

This repository is used for the development of the CVE JSON record format. Releases of the CVE JSON record format will also be published here. This repository is managed by the CVE Quality Working Group.

intrigue-ident

Application and Service Fingerprinting

jaeles-signatures

Default signature for Jaeles Scanner

misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

trufflehog

Find, verify, and analyze leaked credentials

domloggerpp

gitleaks

Protect and discover secrets using Gitleaks 🔑

m4ll0k.github.io

m4ll0k blog