doglife007,github

atm

The Adaptive Security Testing Methodology (ASTM) provides context-adjusted testing methodologies based on factors such as time available to test, platform, technology stack, versions, plugins, modules, and other variables.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

betterdefaultpasslist

brutescrape

A web scraper for generating password files based on plain text found

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks.

corstest

A simple CORS misconfiguration scanner

dirsearch

Web path scanner

dnspop

Analysis of DNS records to find popular trends

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdb-1

Automatically exported from code.google.com/p/fuzzdb

google-dorks

Common google dorks and others you prolly donn know :P

hack-tools

hack tools

hacking-books

hunt

massexpconsole

adding more exploits and tools

open-redirect-scanner

open redirect subdomains scanner

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing

List of awesome penetration testing resources, tools and other shiny things

python-pentest-tools

Python tools for penetration testers

robotsdisallowed

A harvest of the Disallowed directories from the robots.txt files of the world's top websites.

scan_xxe

Explotación de la vulnerabilidad XXE de XML

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.