robotshell

CrackMapExec

A swiss army knife for pentesting networks

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

Instagram-

Bruteforce attack for Instagram

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

fuzz.txt

Potentially dangerous files

TorBot

Dark Web OSINT Tool

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops

JAWS

JAWS - Just Another Windows (Enum) Script

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

weaponised-XSS-payloads

XSS payloads designed to turn alert(1) into P1

Bug-Bounty-Wordlists

A repository that includes all the important wordlists used while bug hunting.

uro

declutters url lists for crawling/pentesting

diva-android

DIVA Android - Damn Insecure and vulnerable App for Android

Auto_Wordlists

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

symbiote

Your target's phone's front and back cameras📸 can be accessed by sending a link🔗.

ovaa

Oversecured Vulnerable Android App

mobile-nuclei-templates

Frack

Frack - Keep and Maintain your breach data

urless

De-clutter a list of URLs

InsecureShop

An Intentionally designed Vulnerable Android Application built in Kotlin.

pivaa

Created by High-Tech Bridge, the Purposefully Insecure and Vulnerable Android Application (PIVAA) replaces outdated DIVA for benchmark of mobile vulnerability scanners.

DVPA

Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges

pwndbTorCredentials

Android_install

Android Pentest Setup Environment

Proxyshell-Exchange

Poc script for ProxyShell exploit chain in Exchange Server