mohammed-sec2010

Mizanapp

productScreen

Enum_For_All

web-pentesting

Repo oriented to web app testing

Monitorizer

The ultimate subdomain monitorization framework

ZeroScan

ZeroScan is a tool that auto gathers subdomains and scan ports

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

cazador_unr

Simple Hacking tools

BurpSuite-Team-Extension

This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your Burpsuite instance will be replicated in the history of the other testers and vice-versa!

LinksDumper

Extract (links/possible endpoints) from responses & filter them via decoding/sorting

plugin

test

tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

awvs_190703137

Docker Awvs

LazyRecon

Subdomain discovery using Sublist3r, certspotter, crt.sh , censys and amass . Subdomain bruteforcing using Gobuster and Resolve hosts using tomnomnom's filter-resolved.

yandi-scanner

Network Security Vulnerability Scanner

monitorSubdomains

use subfinder to monitor subdomains.

SecDevices_docker

自行编写的工作中使用到的安全设备Dockerfile

nmap-vulners

NSE script based on Vulners.com API

bypass-firewalls-by-DNS-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

JSFinder

JSFinder is a tool for quickly extracting URLs and subdomains from JS files on a website.

4nonimizer

A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)

bypass-waff

bypass waff untuk sql injection

cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

trigmap

A wrapper for Nmap to automate the pentest

webHunt

Web App bug hunting

kaboom

automatic pentest

230-OOB

An Out-of-Band XXE server for retrieving file contents over FTP.

BurpBounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

isup

Find alive host from dumped subdomains, huge domain list , alive subdomains

reflectedParamterRecon

A tool for grabbing url with GET parameters which value reflected in response.