attacker34 Goto Github PK

awesome-social-engineering

A curated list of awesome social engineering resources.

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awesome_pentest

awesomexss

Awesome XSS stuff

aws-audit

AWS Audit Scripts - CloudFront subdomain takeover audit, etc

bandit-ss

barq

barq: The AWS Cloud Post Exploitation framework!

bbht

A script to quickly set up an Ubuntu 16.04.3 LTS x64 VPS box with tools I use.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

blog_backup

A repository with various tutorials on how to do things in Pentesting, setup environments and other things

bloodhound

Six Degrees of Domain Admin

bountyplz

Automated security reporting from markdown templates (HackerOne is currently the platform supported)

brute

Package brute allows concurrently bruteforce subdomains for a domain using a list of DNS servers and querying a desired DNS record

bucketkicker

Brute force AWS bucket finder

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbountyguide

Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

bugcrowd_university

Open source education content for the researcher community

burp_wp

Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.

burpbounty

Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

burpsmartbuster

A Burp Suite content discovery plugin that add the smart into the Buster!

burpsuite-1

BurpSuite using the document and some extensions

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

certs

Parse X509 certificates to get the (sub)domains in it.

certspotter

Certificate Transparency Log Monitor

chas

An automated script to perform recon on a target to be used as the early recon stages of a pentest.

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet