pacenoge Goto Github PK

amass

In-Depth DNS Enumeration written in Go

aquatone

A Tool for Domain Flyovers

awesome-waf

🔥 A curated list of awesome web-application firewall (WAF) stuff.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugcrowd_university

Open source education content for the researcher community

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

command-injection-payload-list

🎯 Command Injection Payload List

configs

Config files & folders for fuzzing

diggy

Extract endpoints from apk files.

dirsearch

Web path scanner

dsiem

Security event correlation engine for ELK stack

esfileexploreropenportvuln

ES File Explorer Open Port Vulnerability - CVE-2019-6447

gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

github-search

Tools to perform basic search on GitHub.

gitrob

Reconnaissance tool for GitHub organizations

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

gobuster

Directory/file & DNS busting tool written in Go

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

js-scan

a .js scanner, built in php. designed to scrape urls and other info

linkfinder

A python script that finds endpoints in JavaScript files

loki

Remote Access Tool/Botnet

meg

Fetch many paths for many hosts - without killing the hosts

megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids.

mentalist

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

oscp-archives

An archive of everything related to OSCP

osint

photon

Incredibly fast crawler which extracts urls, emails, files, website accounts and much more.

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

ssrf-testing

SSRF (Server Side Request Forgery) testing resources