shamrocksu88 Goto Github PK

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

acamar

A Python3 based single-file subdomain enumerator

aem-hacker

amass

In-Depth DNS Enumeration and Network Mapping

arjun

HTTP parameter discovery suite.

assetnote

Push notifications for passive DNS data

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩‍💻

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bounty-monitor

Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.

bucketlist

Amazon S3 bucket spelunking!

bugbounty-resources

burpextenders

Custom Burpsuite Extensions

calexe

Calendar Exploit.

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

crtndstry

Yet another subdomain finder

ctf

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

dirsearch

Web path scanner

djangohunter

Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.

docs.hackerone.com

HackerOne Platform Documentation

domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

doser.py

DoS tool for HTTP requests (inspired by hulk but has more functionalities)

exploits

Repo that will contain variety of exploits for either public CVE or internal research.

ffuf

Fast web fuzzer written in Go

findomain

The fastest and cross-platform subdomain enumerator, don't waste your time.

firefox-ios

Firefox for iOS

fockcache

FockCache - Minimalized Test Cache Poisoning

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gap-burp-extension

Burp Extensions

gitdump

A pentesting tool that dumps the source code from .git even when the directory traversal is disabled