5p3c7er Goto Github PK

5p3c73r

argumentinjectionhammer

A Burp Extension designed to identify argument injection vulnerabilities.

assetfinder

Find domains and subdomains related to a given domain

awesomexss

Awesome XSS stuff

burl

A Broken-URL Checker

dockerfiles

🐳 Collection of dockerfiles and automated docker hub builds

ffuf

Fast web fuzzer written in Go

graphqlmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

openamundsen

Modular snow and hydroclimatological modeling framework written in Python

osmedeus

Automatic Reconnaisance and Scanning in Penetration Testing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

photon

Incredibly fast crawler designed for reconnaissance.

php-static-analysis-tools

A reviewed list of useful PHP static analysis tools

poc-in-github

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

server-status_pwn

A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.

solr-ssrf

Apache Solr SSRF(CVE-2021-27905)

sparta

Network Infrastructure Penetration Testing Tool

test

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

wordpresscan

WPScan rewritten in Python + some WPSeku ideas

xtream-ui-install