seqrity

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

dnSpy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

OneListForAll

Rockyou for web fuzzing

HackBar

HackBar plugin for Burpsuite

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

fiddler-everywhere-enhance

Fiddler Everywhere is a secure and modern web debugging proxy for macOS, Windows, and Linux.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

BurpJSLinkFinder

Burp Extension for a passive scanning JS files for endpoint links.

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares.

Leaked-Credentials

how to look for Leaked Credentials !

fingerprintx

Standalone utility for service discovery on open ports!

cero

Scrape domain names from SSL certificates of arbitrary hosts

Python-dsstore

A library for parsing .DS_Store files and extracting file names

graphql-cop

Security Auditor Utility for GraphQL APIs

headerpwn

A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

GoLinkFinder

A fast and minimal JS endpoint extractor

domloggerpp

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

gungnir

CT Log Scanner

Awesome-Dorks

Dorks for Bug Bounty Hunting

tew

A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.

EvenBetter

EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎

h2spacex

HTTP/2 Single Packet Attack low level library / Tool based on Scapy

CVE-2024-4358

Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)

CVE-2023-48788

Fortinet FortiClient EMS SQL Injection

SensitiveDiscoverer

Sensitive Discoverer, a Burp extension to discovers sensitive information inside HTTP messages.

SQL-Wordlist

domlogger-configs

Useful configurations for the DomLogger++ extension

CVE-2015-9251

simple-scraper

SimpleScraper is an open-source tool designed to fetch and transform website content based on URLs provided via an API. Can be used to give LLMs access to live browsing capabilities.

uniqueurls

uniqueurls is a Python-based tool used for decluttering a list of URLs by performing string similarity comparisons. It generates a list of unique URLs by comparing the similarity of path components of URLs.