samidunimsara

SubEnum

bash script for Subdomain Enumeration

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Task-Ninja

Ultimate Tasks Automation Framework for Hackers, DevSecOps, Pentesters, and Bug-bounty hunters!

Awesome-Red-Teaming

List of Awesome Red Teaming Resources

TOP

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

CISA_KNOWN_EXPLOITED_VULNERABILITIES_CATALOG

Git Scraping project for CISA Known Exploited Vulnerability Catalog

AWVS-Update

Awvs Scanner、fahai

KEV

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

Web-Application-Attack

Web Application Attack

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Sparty-2.0

An MS Sharepoint and Frontpage Auditing Tool

OneForAll

OneForAll是一款功能强大的子域收集工具

Clear-Sky

Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

CloudRecon

ShadowClone

Unleash the power of cloud

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

tew

A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.

Asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

shortscan

An IIS short filename enumeration tool

gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

burp-vps-proxy

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

dnsresolver

A Lightning-Fast DNS Resolver written in Rust 🦀

BChecks

BChecks collection for Burp Suite Professional

GAP-Burp-Extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

inventory

Asset inventory of over 800 public bug bounty programs.

SubDomz

An Automated Subdomain Enumeration Tool

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities