pikpikcu

XRCross

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

js-finding

JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various extraction methods and provides additional options for file download and wordlists creation.

nuclei-fuzz

hostinject

hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a target URL or a list of URLs. It injects various header values and checks for potential vulnerabilities.

subdomain-monitoring-elasticsearch

nodecraw

nodecraw allows you to perform web crawling on specified URLs. It utilizes various modules and libraries to crawl web pages, extract information, and save the results.

bash-recon

[+] bash recon

CloudFail

Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

bbot

OSINT automation for hackers.

open-source-web-scanners

A list of open source web security scanners

bug-actions

ip2host

This tool performs TLS connections to specified IP addresses, retrieves host information, and optionally gathers detailed IP information using the ipapi.co API.

jaeles

The Swiss Army knife for automated Web Application Testing

tlds

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

dProgBb

Detect Program Bug Bounty

fuzzing-templates

Community curated list of nuclei templates for finding unknown security vulnerabilities.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

TheFatRat

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software

gofuzz

payloads

pikpikcu

postmarketos-x01ad

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

test

test-takeover

xss-actions