airpydump

Analyze Wireless Packets on the fly. Currently supporting three working Modes (Reader, Live, Stealth)

all-about-apikey

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

assignment-maker

autoget

A bash script that automates the setup process for a Ubuntu/Kali machine or server by installing essential pentesting and reconnaissance tools.

bopscrk

Generate smart and powerful wordlists

dirb

Web Fuzzer

dismap

Asset discovery and identification tools 快速识别 Web 指纹信息，定位资产类型。辅助红队快速定位目标资产信息，辅助蓝队发现疑似脆弱点

hakcheckurl

Takes a list of URLs and returns their HTTP response codes

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

heroku-node

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

jaeles

The Swiss Army knife for automated Web Application Testing

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

mind-maps

Mind-Maps of Several Things

muhammad-qasim-munir

next-netlify-starter

nextjs-blog-theme

nuc_templates

officedocs-exchange

Contains documentation for Exchange Server and Exchange Online

omniscidb

OmniSciDB (formerly MapD Core)

secret-regex-list

List of regex for scraping secret API keys and juicy information.

securitypwned.github.io

serve

Static file serving and directory listing

subdomainsenumerator

A docker image which will enumerate, sort, unique and resolve the results of various subdomains enumeration tools.

test

this is test

tilde_enum

Takes a URL and checks the system for the tilde enum vuln and then find the files.

tools

This repository contains a variety of command-line tools that can help accomplish various tasks more efficiently.

unhttpx

unhttpx is not a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library. In fact, it does the exact opposite. TL;DR: turns a list of URLs into hostnames.

venom

venom - shellcode generator/compiler/handler (metasploit)

web-application-pentest-checklist