Squ0nk

ffuf

Fast web fuzzer written in Go

assetfinder

Find domains and subdomains related to a given domain

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

Web-CTF-Cheatsheet

Web CTF CheatSheet 🐈

SilentHound

Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.

metagoofil

Metadata harvester

msdorkdump

Google Dork File Finder

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

StegCracker

Steganography brute-force utility to uncover hidden data inside files

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

44CALIBER

Password+Cookies and more stealer, with sending logs into your Discord channel

Stealerium

Stealer + Clipper + Keylogger

school

SafetyKatz

SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader

SharpUp

SharpUp is a C# port of various PowerUp functionality.

Bug-Bounty-Beginner-Roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

TOP

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

Dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

Awesome-RCE-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

Bot-Bounty

Python Script for Telegram Bot is specially built for pentest & bug bounty. It's like a telegram shell.

idaplugins-list

A list of IDA Plugins

linux-exploit-suggester

Linux privilege escalation auditing tool

LinEnum

Scripted Local Linux Enumeration & Privilege Escalation Checks

p0wny-shell

Single-file PHP shell

scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

PersistenceSniper

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

rust-stealer

Simple Rust Stealer

TG-bait-bot

rdp-sec-check

rdp-sec-check is a Perl script to enumerate security settings of an RDP Service (AKA Terminal Services)