upgoingstar Goto Github PK

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

auth-check

Checks from a list of URLs, if they are accessible without login or not. Also checks for a specific string (regex) in response and tells if pattern matched or not.

awesome-attack-surface-monitoring

Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-teaming

List of Awesome Red Teaming Resources

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

blog

A small offline blog in C++

checkms15-034.py

Checks if given IP is vulnerable to MS015-024 (IIS Remote Code Execution Vulnerability).

cmsfuzz

cr3dov3r

Know the dangers of credential reuse attacks.

hackerone_public_reports

Finds all public bug reports on reported on Hackerone

hunt

inetdata

Internet data acquisition

inetdata-parsers

Internet data processing tools

infoga

Infoga - Email Information Gathering

ip-generator

Generates IP, while Excluding/Including specific IP blocks. Useful in Mass Scanning.

jetleak-testing-script

Script to test if a server is vulnerable to the JetLeak vulnerability

joelfx98.github.io

json2html

It converts a json file to html table.

mobiliz3r

Utility to automatically scan Android APK file for any sensitive information.

mysql-to-elasticsearch-dump

This small script will pick all your data from a db and push it into the ElasticSearch db, by making key value pairs.

null-delhi-humla

This repository holds all the codes we made participants write down in Python for pentesters Humla Session

one-liners

A collection of awesome one-liners for bug bounty hunting.

osint-framework

OSINT Framework

push

A simple bash tool to push files to servers via SCP

quick_hash_encrypt

Quickly generates hashes / encrypted / encoded value of the passed string.

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

shubhammittal.net

A free and open-source Jekyll theme. Great for blogs and easy to customize.

slack_invite_automation_sinatra

Slack invite automation using sinatra

spaces-finder

A tool to hunt for publicly accessible DigitalOcean Spaces