x0data Goto Github PK

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

modlishka

Modlishka. Reverse Proxy.

my-ctf-web-challenges

Collection of CTF Web challenges I made

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

nmap-bootstrap-xsl

A Nmap XSL implementation with Bootstrap.

o365-attack-toolkit

A toolkit to attack Office365

parampampam

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pdlist

A passive subdomain finder

pentest-resources

pentest-tools

Custom pentesting tools

pentesting

php-webshells

Common php webshells. Do not host the file(s) on your server!

pocsuite3

pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

purge

Public OSINT data

raven

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

rfd-checker

RFD Checker - security CLI tool to test Reflected File Download issues

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

services-names-wordlist

services-names-wordlist

shhgit

Find GitHub secrets in real time

subjack

Subdomain Takeover tool written in Go

subover

A Powerful Subdomain Takeover Tool

subzy

Subdomain takeover vulnerability checker

uncompyle

Python decompiler

vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

vulnx

Vulnx 🕷️ Cms and vulnerabilites detector, & An intelligent bot auto shell injector

vulscan

Advanced vulnerability scanning with Nmap NSE