tmacbg Goto Github PK

privilege-escalation-awesome-scripts-suite

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

puff

Clientside vulnerability / reflected xss fuzzer

pure-bash-bible

📖 A collection of pure bash alternatives to external processes.

python

python scripts and stuff

recon2

This is just a tool by a noob :(

reconftw

Simple script for full recon

reconmaster

ReconMaster contest - scripts used and a little write-up

recursive-gobuster

A wrapper around gobuster that automatically scans newly discovered directories.

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

reel-search

RAMReel is a controller that allows you to choose options from a list

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

reverse-engineering-tutorial

A comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

reverserdp_rce

route53securesweep

rush

A cross-platform command-line tool for executing jobs in parallel

samlists

Free, libre, effective, and data-driven wordlists for all!

scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

scripthunter

Tool to find JavaScript files on Websites

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

secretscanner

Find secrets and passwords in container images and file systems

self-xss

Self-XSS attack using bit.ly to grab cookies tricking users into running malicious code

shotlooter

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sourcewolf

Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥

ssrf-tool

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;)

stuf.sh

Dead simple script for extracting urls from ffuf's json output

subs_all

Subdomain Enumeration Wordlist. 8956437 unique words. Updated.

subscraper

Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomains to enumerate a list of subdomains for a given URL.