qran253 Goto Github PK

libinjection

SQL / SQLI tokenizer parser analyzer

mhddos

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

mip22

:computer: :iphone: mip22 is a advanced phishing tool

monsoon

Fast HTTP enumerator

onelistforall

Rockyou for web fuzzing

open-source-web-scanners

A list of open source web security scanners

paramspider

Mining parameters from dark corners of Web Archives

payloads

Git All the Payloads! A collection of web attack payloads.

payloads-1

Payloads for Bug Bounty and Web Hacking & Web Security

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

pfuzz

pFuzz helps us to bypass web application firewall by using different methods at the same time.

php-jpeg-injector

Injects php payloads into jpeg images

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

rustscan

🤖 The Modern Day Port Scanner 🤖

samlists

Free, libre, effective, and data-driven wordlists for all!

scan4all

Vulnerabilities Scan: 15000+PoCs; 20 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty...

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sifter

Sifter aims to be a fully loaded Op Centre for Pentesters

social-analyzer

API and Web App for analyzing & finding a person profile across 300+ social media websites (Detections are updated regularly)

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

storm-breaker

Tool social engineering [Access Webcam & Microphone & Os Password Grabber & Location Finder] With Ngrok

subdomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

subrake

A Subdomain Enumeration and Validation tool for Bug Bounty and Pentesters.

sudomy

Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format

ugly-scripts

A collection of scripts for bug-bounty related stuff

uncover

Quickly discover exposed hosts on the internet using multiple search engine.

urlprobe

Urls status code & content length checker

userefuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer