evcuq4hggjd74lhz Goto Github PK

.gf

1u.ms

403bypasser

activescanplusplus

ActiveScan++ Burp Suite Plugin

admin-panel_finder

A burp suite extension that enumerates infrastructure and application admin interfaces (OTG-CONFIG-005)

affinis

agartha

a burp extension for dynamic payload generation to detect injection flaws (LFI, RCE, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitations.

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

api-fuzzer

API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities

api-fuzzer2

api-securityempire

API Security Project aims to present unique attack & defense methods in API Security field

application-security-handbook

A knowledge base of best practices for application security

appsecezine

AppSec Ezine Public Repository.

archivefuzz

Hunt down the secrets from the WebArchives for Fun and Profit

arjun

HTTP parameter discovery suite.

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

assetfinder

Find domains and subdomains related to a given domain

ator-burp

auto_wordlists

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

avantation

Build OpenAPI3.0 specification from HAR.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-gpt-agents

A curated list of GPT agents for cybersecurity

awesome-list

Cybersecurity oriented awesome list

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-waf

🔥 Web-application firewalls (WAFs) from security standpoint.

awesome-websocket-security

Awesome information for WebSockets security research

awsscrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

badsecrets

A library for detecting known secrets across many web frameworks

bb-legal-fr

Quelques conseils autour des obligations légales, fiscales et juridique pour la pratique du Bug Bounty en France