earendel3301 Goto Github PK
Type: User
Bio: Cybersecurity Researcher
Type: User
Bio: Cybersecurity Researcher
Awesome XSS stuff
A repository that includes all the important wordlists used while bug hunting.
Automated All-in-One OS Command Injection Exploitation Tool.
The most powerful CRLF injection (HTTP Response Splitting) scanner.
A fast, simple, recursive content discovery tool written in Rust. | directories status code checker
The Last Web Recon Tool You'll Need
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation / used for ratelimit based on IP address bypass
This is go CLI tool for send fast Multiple get HTTP request.
Potentially dangerous files
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A wrapper around grep, to help you grep for things
GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
Tools to perform basic search on GitHub.
A next generation HTTP client for Python. 🦋 HTTPX
scanning web applications for input points
A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.
This a adaption of tomnomnom's kxss tool with a different output format - testing and finding XSS
A collection oneliner scripts for bug bounty
Mining parameters from dark corners of Web Archives
Accept URLs on stdin, replace all query string values with a user-supplied value
LFI-SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
WAF bypass checklist Injections
An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash.
Sub-Domain TakeOver Vulnerability Scanner
🔥 🔥 Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more. 🔥 🔥
:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock
declutters url lists for crawling/pentesting - very good tool to test targets with alot of urls
good collection of wordlists for fuzzing
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.