sgmnt-qzh

Hacker-Scripts

POWER(SHELL) ALL THE THINGS!

ffuf

Fast web fuzzer written in Go

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Burp-Hunter

XSS Hunter Burp Plugin

Sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

EyeWitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

aquatone

A Tool for Domain Flyovers

amass

In-depth attack surface mapping and asset discovery

HUNT

scanner

GTFOBins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

lgtm

LGTM is a simple pull request approval system [ARCHIVE]

archerysec

ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

PatrowlManager

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

BurpBounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

EventFinder2

Finds event logs between two time points. Useful for helpdesk/support/malware analysis.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

zaproxy

The ZAP by Checkmarx Core project

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

ActiveScanPlusPlus

ActiveScan++ Burp Suite Plugin

XSStrike

Most advanced XSS scanner.

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

p0wny-shell

Single-file PHP shell

b374k

PHP Webshell with handy features

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Sublist3r

Fast subdomains enumeration tool for penetration testers