RedHosain

games_pathao

Bug Hunt

zphisher

An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

PeriTa

Test Project

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

15-Best-Python-Libraries-for-Cybersecurity

My Personal

Amass

In-depth Attack Surface Mapping and Asset Discovery

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

exploits

Miscellaneous exploit code

farenasms

SMS Bombing

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

proxify

Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

ffuf

Fast web fuzzer written in Go

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

php-reverse-shell

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.

awesome-hacker-api-tools

A collection of hacker tools using HackerOne's API

autoreport

Facebook auto report tool

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

Gorecon

Gorecon is a All in one Reconnaissance Tool , a.k.a swiss knife for Reconnaissance , A tool that every pentester/bughunter might wanna consider into their arsenal

nuclei-action

Dynamic Application Security Testing (DAST) with Nuclei

reports

assetfinder

Find domains and subdomains related to a given domain

Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

gauplus

homoglyph

A big list of homoglyphs and some code to detect them

L3MON

L3MON - Remote Android Managment Suite

PowerLadon

Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC