n0m3l4c000nt35

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-react

A collection of awesome things regarding React ecosystem

awesome-react-native

Awesome React Native components, news, tools, and learning material!

awesome-python

An opinionated list of awesome Python frameworks, libraries, software and resources.

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

Herramienta-Hacking-Beef

Aqui vamos a instalr Beef, en kali linux

CamPhish

Grab cam shots from target's phone front camera or PC webcam just sending a link.

WhatWeb

Next generation web scanner

h4cker

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

PCredz

This tool extracts Credit card numbers, NTLM(DCE-RPC, HTTP, SQL, LDAP, etc), Kerberos (AS-REQ Pre-Auth etype 23), HTTP Basic, SNMP, POP, SMTP, FTP, IMAP, etc from a pcap file or from a live interface.

net-creds

Sniffs sensitive data from interface or pcap

angryFuzzer

Tools for information gathering

logrotten

kubeletctl

A client for kubelet

searchbins

Offline command line tool that searches for GTFOBins binaries that can be used to bypass local security restrictions in misconfigured systems.

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

wpscan

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.

chisel

A fast TCP/UDP tunnel over HTTP

KeyTabExtract

Extracts Key Values from .keytab files

sssd

A daemon to manage identity, authentication and authorization for centrally-managed systems.

Rubeus

Trying to tame the three-headed dog.

evil-winrm

The ultimate WinRM shell for hacking/pentesting

Invoke-TheHash

PowerShell Pass The Hash Utils

mimikatz

A little tool to play with Windows security

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

mimipenguin

A tool to dump the login password from the current linux user

LaZagne

Credentials recovery project