amreetvishal Goto Github PK

bettercap

The state of the art network attack and monitoring framework.

brutesubs

An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

burp-vulners-scanner

Vulnerability scanner based on vulners.com search API

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

ctf-notes

datasploit

A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

gobuster

Directory/file & DNS busting tool written in Go

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

metasploit-framework

Metasploit Framework

modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

onetwopunch

Use unicornscan to quickly scan all open ports, and then pass the open ports to nmap for detailed scans.

parameth

This tool can be used to brute discover GET and POST parameters

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

sublist3r

Fast subdomains enumeration tool for penetration testers