uid-root Goto Github PK

3rdparty-services

PHP tool to test 3rd party service validity

act_custom

Custom scripts for Actarus

actarus

Actarus is a custom tool for bug bounty

active-directory

Collection of scripts for Querying and Managing Active Directory and Domain Controllers

adidnsdump

Active Directory Integrated DNS dumping by any authenticated user

aem-hacker

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

amass

In-depth Attack Surface Mapping and Asset Discovery

amass-1

In-depth Attack Surface Mapping and Asset Discovery

api_paths

A list of REST API URL paths for use in blackbox API end-point discovery

api_wordlist

A wordlist of API names for web application assessments

aquascreen

Personal script to grab all the subdomains of a specific target from Aquatone and run Webscreenshot tool on each subdomain.

aquatone

A Tool for Domain Flyovers

arjun

HTTP parameter discovery suite.

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

assetfinder

Find domains and subdomains related to a given domain

awesome-awesomeness

A curated list of awesome awesomeness

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

awesomexss

Awesome XSS stuff

axeman

Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)

azure-quickstart-templates

Azure Quickstart Templates

b-xssrf

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

bb-reports-templates

My small collection of reports templates

bbht

A script to set up a quick Ubuntu 18.04 LTS x64 box with tools I use..

bbstats

Bug Bounty statistics

bbvuln

A listing of the most common vuln that you can link in your PoCs

blackwidow

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

bloodhound

Six Degrees of Domain Admin