vortexau

dnsvalidator

Maintains a list of IPv4 DNS servers by verifying them against baseline servers, and ensuring accurate responses.

cdn

Compiles a list of major CDN and WAF subnets.

FeedlySecurityFeeds

My Feedly Security Feeds

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

Asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

fav-up

IP lookup from favicon using Shodan

subjack

Subdomain Takeover tool written in Go

Amass

In-Depth DNS Enumeration and Network Mapping

brewcompetitiononlineentry

Version 2.1.13 has been released. Click "releases" below to download.

cspparse

A tool to evaluate Content Security Policies.

dwr

Direct Web Remoting, Java framework for Ajax, Comet, browser-server RPC, supports JSON, Bayeux, and more

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

LinkFinder

A python script that finds endpoints in JavaScript files

meg

Fetch many paths for many hosts - without killing the hosts

Minesweeper

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 6100+ malicious cryptocurrency mining domains (cryptojacking).

SprayingToolkit

Scripts to make password spraying attacks against Lync/S4B & OWA a lot quicker, less painful and more efficient

vortexau

zombie

Insanely fast, full-stack, headless browser testing using node.js

APAC-Firms

A list of Information Security firms operating in th Asia-Pacific region, and where student intake opportunities can be found.

crithit

Takes a single wordlist item and tests it one by one over a large collection of hosts before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

docker-beersmith

Run Beersmith from Docker, for unsupported Linux OSs

public-bugbounty-programs

Community curated list of public bugbounty and responsible disclosure programs.

scrapts

Scrapts Scrapts Scrapts

sectalkscbr-sqli

Slides and Code from SQLi talk & workshop

vortex.au

vortexau.github.io

wapalyzer

🌐 Identify the technologies powering any website. This is a fork of the now deleted Wappalyzer project by @AliasIO and community.

wappalyzergo

A high performance go implementation of Wappalyzer Technology Detection Library

weird_proxies

Reverse proxies cheatsheet