reewardius

dirsearch

Web path scanner

gixy

Nginx configuration static analyzer

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

NoSQLMap

Automated NoSQL database enumeration and web application exploitation tool.

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

S3Scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

jaeles

The Swiss Army knife for automated Web Application Testing

Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

BurpBounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

BlackWidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

XSpear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

go-dork

The fastest dork scanner written in Go.

electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

BugBountyScanner

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

security-tools

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

puncia

The Panthera(P.)uncia of Cybersecurity - Official CLI utility for Subdomain Center & Exploit Observer.

WordList

nuclei-ai-extension

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

XnlReveal

A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements.

check_mdi

Python script to enumerate valid Microsoft 365 domains, retrieve tenant name, and check for an MDI instance.

postleaks

Search for sensitive data in Postman public library.

AcuAutomate

Unofficial Acunetix CLI tool for automated pentesting and bug hunting across large scopes.

HExHTTP

Header Exploitation HTTP

letItGo

Enumerate and check domains for Azure tenants

archive_pwn

A Python-based tool to create zip, tar and cpio archives to exploit common archive library issues and developer mistakes

pathbuster

PathBuster - multiple hosts Web path scanner

pullei

Nuclei Templates Pull Request Downloader