spwn3r49sd3r00 Goto Github PK

addvulcan

ADDVulcan satellite hacking solutions for for Hack-A-Sat 2020

ail-framework

AIL framework - Analysis Information Leak framework. Project moved to https://github.com/ail-project

akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

ansible-proxy

set Proxy by ansible

apkleaks

Scanning APK file for URIs, endpoints & secrets.

archerysec

Centralize Vulnerability Assessment and Management for DevSecOps Team

arjun

HTTP parameter discovery suite.

assetnote

Push notifications for passive DNS data

atlas

Quick SQLMap Tamper Suggester

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

bandit

Bandit is a tool designed to find common security issues in Python code.

barmie

Java RMI enumeration and attack tool.

bbrf-client

The client component of the Bug Bounty Reconnaissance Framework (BBRF)

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

broken-link-checker

Find broken links, missing images, etc within your HTML.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

bxss

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

c-jwt-cracker

JWT brute force cracker written in C

caspereye

Advanced Recon Tool

cloudunflare

Reconnaissance Real IP address for Cloudflare Bypass

contracts

A small collection of potentially useful contract templates

cors-one-liner

A one liner Bash command which finds CORS in every possible endpoint.

corstest

A simple CORS misconfiguration scanner

crackmapexec

A swiss army knife for pentesting networks

crlf-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

css-injection-in-swagger-ui

CSS injection vulnerability in Swagger UI