-tool-waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

403-bypass-subdomains.txt-toll

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

androidhack_backdoor

Android-BackDoor is a python and shell script that simplifies the process of adding a backdoor to any Android APK file. It also exploits the Android Debug Bridge to remotely access an Android device.

arf-web

Active Recon Framework Web Management

ars0n-framework

A Modern Framework for Bug Bounty Hunting

assetfinder

Find domains and subdomains related to a given domain

awesome-cybersec-resources

An awesome collection of curated Cyber Security resources(Books, Tutorials, Blogs, Podcasts, ...)

awesome-waf-read-this

🔥 Web-application firewalls (WAFs) from security standpoint.

bbrf-dashboard

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bbtz

BBT - Bug Bounty Tools (examples💡)

bheem

blackdragon

An Adavnced Automation Tool For Web-Recon Developed For Linux Systems

breakingbricks

Some tools used in the Ruxcon / Kiwicon /SECT-T presentation "Breaking Bricks and Plumbing Pipes: Cisco ASA a Super Mario Adventure."

bug_bounty_notes

A collection of notes for bug bounty hunting

bugbounty

A repository got a bug bounty tips, cheat sheets and other helpers in bug bounty field

bugy-tool-full

a simple helpful tool for Bug Hunters

calculator

Simple calculator built with React

calculator-1

A Calculator App built with HTML, CSS, and JavaScript. It also has a Dark Mode.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

capncook

capNcook - a dark web exploration tool

certdomainfinder

Finds the domains using the certspotter API

cloner

codemirror5

In-browser code editor (version 5, legacy)

crtiflux.js

A WebApp for Sub-Domain Enumeration using `crt.sh` without using any api key.

csrf_poc_generate

CSRF_POC_Generate is a proof-of-concept (POC) tool designed to demonstrate Cross-Site Request Forgery (CSRF) vulnerabilities in web applications.

ctf

Here You Will Find My Open Source CTF's That I Built

custom_vuln_scan_templates

A collection of custom built scan templates for automated vuln scanning (nuclei, Burp, etc.)

cve-2023-38831-winrar-exploit

CVE-2023-38831 winrar exploit generator

cve-2023-50164-apache-struts-rce

A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code execution (RCE).