remonsec

free-programming-books

:books: Freely available programming books

trufflehog

Find, verify, and analyze leaked credentials

Active-Directory-Exploitation-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

bbot

A recursive internet scanner for hackers.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

poe-api

[UNMAINTAINED] A reverse engineered Python API wrapper for Quora's Poe, which provides free access to ChatGPT, GPT-4, and Claude.

NucleiFuzzer

NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

Bug-Bounty-Wordlists

A repository that includes all the important wordlists used while bug hunting.

chatGPT-shell-cli

Simple shell script to use OpenAI's ChatGPT and DALL-E from the terminal. No Python or JS required.

Upload_Bypass

A simple tool for bypassing file upload restrictions.

ChopChop

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

socialhunter

crawls the website and finds broken social media links that can be hijacked

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

Bug-Bounty-Wordlists

mantra

「🔑」A tool used to hunt down API key leaks in JS files and pages

hakcheckurl

Takes a list of URLs and returns their HTTP response codes

BypassFuzzer

Fuzz 401/403/404 pages for bypasses

Gel4y-Mini-Shell-Backdoor

A webshell that can bypass some system security, all code has been obfuscated to bypass malware scans freely.

gat

🐱 cat alternative written in Go.

graphquail

Burp Suite extension that offers a toolkit for testing GraphQL endpoints.

PentestMuse

s3sec

Check AWS S3 instances for read/write/delete access

mapperplus

MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.

Releases

🐧 Releases: Latest iso of metis linux

heaptruffle

Mine URLs from Browser's Heap Snapshot for fun and profit

dnsresolver

A Lightning-Fast DNS Resolver written in Rust 🦀

companies-hiring-security-remote

List of companies that hire security people full remote.

OSCP

I used the Templater community plugin in obsidian to automatically populate IP,username,password

Nuclei-Templates

Downlaod all the nuclei Templates created from many Bug Hunters

wayfiles

Wayfiles is a tool designed to search for juicy files and URLs within a folder/file with results of tools like gau, waymore, waybackurls, etc.