bhishma14 Goto Github PK

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

dastardly_test

To Test dastardly in local

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dirdar

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

dirsearch

A Go implementation of dirsearch.

dirsearch-1

Web path scanner

dns-discovery

DNS-Discovery is a multithreaded subdomain bruteforcer.

docker-bench-security

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

domaincollector

Simple tool to gather domains from crt.sh using the organization name

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

dotdotpwn

DotDotPwn - The Directory Traversal Fuzzer

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

electriceye

Continuously monitor your AWS attack surface and evaluate services for configurations that can lead to degradation of confidentiality, integrity or availability. All results can be exported to Security Hub, JSON, CSV, Databases, and more for further aggregation and analysis.

fastdork

Chrome extension allows you to create lists of Google and Github dork to open multiple tabs with one click, import "scope/out of scope" from HackerOne/Bugcrowd/Intigriti and extract links from raw data.

filebuster

An extremely fast and flexible web fuzzer

find-hardcoded

You can find hardcoded Api-Key,Secret,Token Etc..

for-bug-bounty-hunter-

README.md

forbiddenpass

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

frogy-subdomain-enumeration

My subdomain enumeration

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

getjs

A tool to fastly get all javascript sources/files

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

ghsec-jaeles-signatures

Signatures for jaeles scanner by @j3ssie

git-hound

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

github-dorks

Find leaked secrets via github search

gitjacker

🔪 :octocat: Leak git repositories from misconfigured websites