RedHosain's repositories
games_pathao
Bug Hunt
zphisher
An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !
PeriTa
Test Project
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
15-Best-Python-Libraries-for-Cybersecurity
My Personal
Amass
In-depth Attack Surface Mapping and Asset Discovery
log4j-shell-poc
A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.
log4j-scan
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
exploits
Miscellaneous exploit code
farenasms
SMS Bombing
naabu
A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
proxify
Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.
subfinder
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
ffuf
Fast web fuzzer written in Go
waybackurls
Fetch all the URLs that the Wayback Machine knows about for a domain
byp4xx
Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.
awesome-hacker-api-tools
A collection of hacker tools using HackerOne's API
autoreport
Facebook auto report tool
awesome-cloud-security
🛡️ Awesome Cloud Security Resources ⚔️
Gorecon
Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal
nuclei-action
Dynamic Application Security Testing (DAST) with Nuclei
assetfinder
Find domains and subdomains related to a given domain
Sudomy
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
homoglyph
A big list of homoglyphs and some code to detect them
L3MON
L3MON - Remote Android Managment Suite
PowerLadon
Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC