a-good-cyber-security-list

adhrit

Adhrit is an open source Android APK reversing and analysis tool that can help security researchers and CTF enthusiasts alike. The tool is an effort to cut down on the amount of time spent on reversing and basic reconnaissance of Android applications.

amass

In-depth DNS Enumeration and Network Mapping

aquatone

A Tool for Domain Flyovers

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-web-pentest

Awesome web penetration testing

awesomexss

Awesome XSS stuff

bashter

Web Crawler, Scanner, and Analyzer Framework (Shell-Script based)

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugcrowd_university

Open source education content for the researcher community

bughunterid

Para pencari bug / celah kemanan bisa bergabung.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

command-mobile-penetration-testing-cheatsheet

Mobile penetration testing android command cheatsheet

content-bruteforcing-wordlist

Wordlist for content(directory) bruteforce discovering with Burp or dirsearch

crlf-injection-payloads

Payloads for CRLF Injection

dirsearch

Web path scanner

gobuster

Directory/file & DNS busting tool written in Go

hacker-roadmap

:pushpin: A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security.

hackeronedb

The unofficial HackerOne disclosure Timeline

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

knock

Knock Subdomain Scan

markdown-xss-payloads

XSS payloads for exploiting Markdown syntax

massc

Subdomain Scanner Tools with word-lists

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

mobile-security-framework-mobsf

Mobile Security Framework is an intelligent, all-in-one open source mobile application (Android/iOS/Windows) automated pen-testing framework capable of performing static, dynamic analysis and web API testing.

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

open-redirect-payloads

Open Redirect Payloads