bhishma14 Goto Github PK

js_scrapper

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

keyfinder

Keyfinder🔑 is a tool that let you find keys while surfing the web!

kickdomain

Kickdomain is a subdomain enumeration and takeover checker tool

kiterunner

Contextual Content Discovery Tool

knock

Knock Subdomain Scan

lfi-enum

Scripts to execute enumeration via LFI

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

liffy

Local file inclusion exploitation tool

linkfinder

A python script that finds endpoints in JavaScript files

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

log4jfrida

log4shell-vulnerable-app

Spring Boot web application vulnerable to CVE-2021-44228, nicknamed Log4Shell.

markdown-xss-payloads

XSS payloads for exploiting Markdown syntax

marshalsec

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

moodle-xss-to-rce-exploit

Moodle exploit that turns XSS to RCE

multi_tools_subdomains

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

myriam

A vulnerable iOS App with Security Challenges for the Security Researcher inside you.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

nuclei

Nuclei is a fast tool for configurable targeted vulnerability scanning based on templates offering massive extensibility and ease of use.

off-by-slash

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

omg-payloads

openbb-scope

OpenBugBounty - https://www.openbugbounty.org/ programs list

oralyzer

Open Redirection Analyzer

param-miner

payloadallthethings

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF