marwan-cpu

gpt-cli

Access GPT3, ChatGPT, and GPT4 straight from your terminal

SecLists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

awsScrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

Upload_Bypass

A simple tool for bypassing file upload restrictions.

Awesome-Red-Teaming

List of Awesome Red Team / Red Teaming Resources This list is for anyone wishing to learn about Red Teaming but do not have a starting point.

Automatic-Intelligence-feed

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

fuzz4bounty

1337 Wordlists for Bug Bounty Hunting

GOAD

game of active directory

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

udon

A simple tool that helps to find assets/domains based on the Google Analytics ID.

juicyinfo-nuclei-templates

Nuclei (https://github.com/projectdiscovery/nuclei) templates for extracting juicy info from web pages

BloodHound

Six Degrees of Domain Admin

h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

queryxss

Tool for testing reflections in the HTTP responses

Mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

Nmap-For-Pentester

This cheatsheet was created to assist Red Teamers and Penetration Testers in hunting down vulnerabilities using "Nmap."

haktrails

Golang client for querying SecurityTrails API data

jsubfinder

jsubfinder searches webpages for javascript & analyzes them for hidden subdomains and secrets (wip).

yakit

Cyber Security ALL-IN-ONE Platform

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

secrets-patterns-db

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Grafana-CVE-2021-43798

Grafana Unauthorized arbitrary file reading vulnerability

dnSpy

.NET debugger and assembly editor

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

firefly

Black box fuzzer for web applications

express-jwt

connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes

Nuclei-bug-hunter

i will upload more templates here to share with the comunity.

pdtm

ProjectDiscovery's Open Source Tool Manager