Suleman Malik's repositories
bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
git-all-secrets
A tool to capture all the git secrets by leveraging multiple open source git searching tools
bug-bounty-reference
Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
arachni
Web Application Security Scanner Framework
Arjun
Arjun is a python script for finding hidden GET & POST parameters.
AutoNSE
Massive NSE (Nmap Scripting Engine) AutoSploit and AutoScanner
bountyplz
Automated security reporting from markdown templates (HackerOne is currently the platform supported)
censys-subdomain-finder
⚡ Perform subdomain enumeration using the certificate transparency logs from Censys.
droopescan
A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.
faraday
Collaborative Penetration Test and Vulnerability Management Platform
Intrusive
Intrusive is a realtime log analysis tool designed to perform IDS and anomalies detection functions
knock
Knock Subdomain Scan
lazyrecon
This script is intended to automate your reconnaissance process in an organized fashion
libsrtp
Library for SRTP (Secure Realtime Transport Protocol)
Optiva-Framework
Optiva-Framework 🔎 Web Application Scanner🕵️
parameth
This tool can be used to brute discover GET and POST parameters
pcc
PHP Secure Configuration Checker
ReconDog
Recon Dog is an all in one tool for all your basic information gathering needs.
Shiva
Improved DOS exploit for wordpress websites (CVE-2018-6389)
SMBrute
SMB Protocol Bruteforce
snallygaster
Tool to scan for secret files on HTTP servers
Striker
Striker is an offensive information and vulnerability scanner.
Swiftness
Swiftness is a macOS productivity tool for bug hunters and security professionals to manage vulnerability-templates and copy them in one click through menu-bar.
ufonet
UFONet - (DDoS botnet + DoS tool) via Web Abuse.
WhatCMS
CMS Detection and Exploit Kit based on Whatcms.org API
wordpress_plugin_security_testing_cheat_sheet
WordPress Plugin Security Testing Cheat Sheet