mhmdiaa

second-order

Second-order subdomain takeover scanner

chronos

Extract pieces of info from a web page's Wayback Machine history

waybackrobots

Enumerate old versions of robots.txt paths using Wayback Machine for content discovery

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

LinkFinder

A python script that finds endpoints in JavaScript files

acumen

A clean UI with a modular structure to enhance security researchers' ability to work with data

web-events

A list of of web events collected from MDN's Event Reference

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

tko-subs

Takeover Domains that have dangling CNAMES pointing to various CMS websites

awsScrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

github-issues-search

A simple command-line tool to search GitHub issues.

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

native-extension

native-firefox