tribunal

syncthing

Open Source Continuous File Synchronization

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

ffuf

Fast web fuzzer written in Go

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

progressbar

A really basic thread-safe progress bar for Golang applications

LinkFinder

A python script that finds endpoints in JavaScript files

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

jaeles

The Swiss Army knife for automated Web Application Testing

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

MobileHackingCheatSheet

Basics on commands/tools/info on how to assess the security of mobile applications

AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets

Mitigating-Web-Shells

Guidance for mitigation web shells. #nsacyber

JSParser

DNSGrep

Quickly Search Large DNS Datasets

commonspeak

Content discovery wordlists generated using BigQuery

upload-scanner

HTTP file upload scanner for Burp Proxy

jaeles-signatures

Default signature for Jaeles Scanner

htbenum

A Linux enumeration script for Hack The Box

anti-axelspringer-hosts

A hosts file which blocks all services from Axel Springer Verlag.

psc

E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward

Ghazi

Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab Will Replace Every GET or POST Parameters With Selected TAB in "Proxy" or "Repeater" TAB

burp-piper

Piper Burp Suite Extender plugin

interestingFileScanner

Burp extension

burp-dump

A Burp plugin to dump HTTP(S) requests/responses to a file system

notes

Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.