mateofumis

Directory-Traversal-Payloads

List of Directory Traversal/LFI Payloads Scraped from the Internet

APKDeepLens

Android security insights in full spectrum.

PlaystoreDownloader

A command line tool to download Android applications directly from the Google Play Store by specifying their package name (an initial one-time configuration is required)

Bug_Bounty_Web_and_API_Tools

Bug Bounty Web and API Payloads

IPFuscator

IPFuscator - A tool to automatically generate alternative IP representations

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

RustScan

🤖 The Modern Port Scanner 🤖

PWAsForFirefox

A tool to install, manage and use Progressive Web Apps (PWAs) in Mozilla Firefox

BlackStone

Pentesting Reporting Tool

SEPunycoder.py

A simple script to convert normal-text to Cyrillic-text. This allows hackers to obfuscate text in puny-code format which can lead into a lot of multiple Phishing attacks.

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

getJS

A tool to fastly get all javascript sources/files

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

403jump

HTTP 403 bypass tool

xnLinkFinder

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

PPScan

Client Side Prototype Pollution Scanner

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

GoTelegramRAT

Impersonator

Simply tool for impersonate user tokens

Android-Pentesting-Scripts

Simple Bash scripts to make easier Android hacking (mobile pentesting).

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

XUnifedParams.py

Python script for Unify all Parameters with all URLs.

Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

SSRFmap

Automatic SSRF fuzzer and exploitation tool

Injectus

CRLF and open redirect fuzzer

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

bypass-url-parser

bypass-url-parser

torctl

Script to redirect all traffic through tor network including dns queries for anonymizing entire system

Tiny-XSS-Payloads

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

SploitScan

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.