m4ll0k

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

Sublist3r

Fast subdomains enumeration tool for penetration testers

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

The-Hackers-Hardware-Toolkit

The best hacker's gadgets for Red Team pentesters and security researchers.

gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

weird_proxies

Reverse proxies cheatsheet

Atlas

Quick SQLMap Tamper Suggester

FingerprintHub

侦查守卫(ObserverWard)的指纹库

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

regexp-security-cheatsheet

confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

JSONBee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

ripgen

Rust-based high performance domain permutation generator.