chh4y Goto Github PK

apk.sh

apk.sh makes reverse engineering Android apps easier, automating some repetitive tasks like pulling, decoding, rebuilding and patching an APK.

asscan

Hello, Attack Surface Scan, The Real Passive Scan, It's like a submarine.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

azuregoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

bark

BloodHound Attack Research Kit

bloodhound-custom-queries

Custom Query list for the Bloodhound GUI based off my cheatsheet

bloodhoundqueries

burp-extensions

Burp Extensions

captcha-killer-modified

captcha-killer的修改版，主要用于验证码爆破，适配新版Burpsuite

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

cheatsheets

Community-sourced cheatsheets

corsy

CORS Misconfiguration Scanner

hookdump

Security product hook detection

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

lnkbomb

Malicious shortcut generator for collecting NTLM hashes from insecure file shares.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

offensivenotion

Notion as a platform for offensive operations

signal-server

Server supporting the Signal Private Messenger applications on Android, Desktop, and iOS

smap

a drop-in replacement for Nmap powered by shodan.io

study-blockchain

thick-client-pentest-checklist

A OWASP Based Checklist With 80+ Test Cases

trufflehog

Find credentials all over the place

vaf

Vaf is a cross-platform very advanced and fast web fuzzer written in nim

vscan

开源、轻量、快速、跨平台 的网站漏洞扫描工具，帮助您快速检测网站安全隐患。功能 端口扫描(port scan) 指纹识别(fingerprint) 漏洞检测(nday check) 智能爆破 (admin brute) 敏感文件扫描(file fuzz)

web-app-pentest-checklist

A OWASP Based Checklist With 500+ Test Cases

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

whoami-project

Whoami provides enhanced privacy, anonymity for Debian and Arch based linux distributions