mrloup Goto Github PK

hacks

A collection of hacks and one-off scripts

hacktricks-cloud

howtohunt

Collection of methodology and test case for various web vulnerabilities.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

make-real

Draw a ui and make it real

mx-takeover

mx-takeover focuses DNS MX records and detects misconfigured MX records.

notify

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

nuclei-bug-hunter

i will upload more templates here to share with the comunity.

nuclei-templates-collection

Nuclei Templates Collection

onelistforall

Rockyou for web fuzzing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poc

PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

roop

one-click deepfake (face swap)

scanners-box

A powerful hacker toolkit collected more than 10 categories of open source scanners from Github - 安全行业从业者自研开源扫描器合辑

scantastic-tool

It's bloody scantastic

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

secureum-mind_map

Central Repository for the Epoch 0 coursework and quizzes. Contains all the content, cross-referenced and linked.

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com

takeover

Sub-Domain TakeOver Vulnerability Scanner

tldraw

SDK for creating whiteboards and canvas experiences on the web.

trivy

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

user-app

End-User Interface

viewgen

Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

waf-a-mole

A guided mutation-based fuzzer for ML-based Web Application Firewalls

waf-community-bypasses