matthaxit Goto Github PK

assetfinder

Find domains and subdomains related to a given domain

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

bug_hunting

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

crtndstry

Yet another subdomain finder

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

dorky

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon

ffuf

Fast web fuzzer written in Go

gf

A wrapper around grep, to help you grep for things

gron

Make JSON greppable!

hackerone-reports

Top disclosed reports from HackerOne

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

juicyinfo-nuclei-templates

Nuclei (https://github.com/projectdiscovery/nuclei) templates for extracting juicy info from web pages

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

meg

Fetch many paths for many hosts - without killing the hosts

mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

securitytesting

social-media-osint

Social Media OSINT collection containing - tools, techniques & tradecraft.

storm-breaker

Social engineering tool [Access Webcam & Microphone & Location Finder] With Python

unfurl

Pull out bits of URLs provided on stdin

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain