yassineaboukir

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

jsmon

a javascript change monitoring tool for bugbounties

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

api-backend

REST API backend for Reconmap

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

GitDorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

laravel-exploits

Exploit for CVE-2021-3129

luigi

Luigi is a Python module that helps you build complex pipelines of batch jobs. It handles dependency resolution, workflow management, visualization etc. It also comes with Hadoop support built in.

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

takeover

Sub-Domain TakeOver Vulnerability Scanner

the-nuclei-templates

Nuclei templates written by us.

web-methodology

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

yassineaboukir

awesome-cve-poc

✍️ A curated list of CVE PoCs.

bcscope

Get the scope of your bugcrowd programs

chrome-extension-manifests-dataset

>100K Chrome Extension manifest.json files for analysis

CVE-2019-0708

CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7

fresh.py

An efficient multi-threaded DNS resolver validator

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

git-dumper

A tool to dump a git repository from a website

gmapsapiscanner

imageproxy

A caching, resizing image proxy written in Go

JSA

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

PatrowlHears

PatrowlHears - Vulnerability Intelligence Center / Exploits

reverie

:art: A ridiculously elegant Jekyll theme.

ripgen

Rust-based high performance domain permutation generator.

subjack

Subdomain Takeover tool written in Go

web-client

React frontend for the Reconmap application https://demo.reconmap.org