phoenix-sec Goto Github PK

aem-hacker

all_in_one_place

assign

auto.sh

This script is (Mainly) for Beginner's

awe-osee-prep

Advanced Windows Exploitation/Offensive Security Exploitation Expert (OSEE) Preparation

burp-bounty-free-profiles-collection

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

collabfiltrator

Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

en

ffuf

Fast web fuzzer written in Go

ffufplus

You can read the writeup on this script here

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

hacking-security-ebooks

Top 100 Hacking & Security E-Books (Free Download)

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

mobilehackersweapons

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

oxml_xxe

A tool for embedding XXE exploits into OXML documents

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

security

Collection of scripts to test your website against vulnerabilities.

swagger

swagger ui xss

top10webseclist

Top Ten Web Hacking Techniques List

tproxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

trishul

Burp Extension written in Jython to hunt for common vulnerabilities found in websites. Developed by Gaurav Narwani to help people find vulnerabilities and teach how to exploit them.

vajra

Vajra is a highly customizable target and scope based automated web hacking framework to automate boring recon tasks and same scans for multiple target during web applications penetration testing.