0xraskin Goto Github PK

recon_profile

redteam-tools

Tools and Techniques for Red Team / Penetration Testing

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

register

Grab your own sweet-looking '.is-a.dev' subdomain

rfi-lfi-payload-list

🎯 RFI/LFI Payload List

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shakrdp

shuffledns

MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

snapper

A security tool for grabbing screenshots of many web hosts

sql-injection-payload-list

🎯 SQL Injection Payload List

ssh-remote-code-execution

SSH Zero-Day Made By ClumsyLulz

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

sublist3r

Fast subdomains enumeration tool for penetration testers

subzy

Subdomain takeover vulnerability checker

takeover

AAAAAAAAAA

temp

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

vhostscan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

wfuzz

Web application fuzzer

word-list

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

xxe-injection-payload-list

🎯 XML External Entity (XXE) Injection Payload List

zonemaster

The Zonemaster Project