bhishma14 Goto Github PK

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sourcemapper

Extract JavaScript source trees from Sourcemap files

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

spyse-subdomain-finder

We all know about the famous spyse.com this python3 scripts scrounges subdomains without the api from spyse cybersecurity search engine

sqli_checker

sqli_checker_v1.1

ssrf-tool

An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

ssrfmap

Automatic SSRF fuzzer and exploitation tool

stacoan

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

sub_analyser

subdomainer

Automated tool for domains & subdomains gathering

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

subjack

Subdomain Takeover tool written in Go

sublist3r

Fast subdomains enumeration tool for penetration testers

subover

A Powerful Subdomain Takeover Tool

subrecon

Fast Subdomain Takeover Enumeration tool written in Go

subscraper

Subdomain enumeration through various techniques

subzy

Subdomain takeover vulnerability checker

subzzz

SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.

sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

susanoo

A REST API security testing framework.

t-reqs-http-fuzzer

T-Reqs: A grammar-based HTTP Fuzzer

talks

Talks that don't have a better home

terraform-aws-s3-subdomain-takeover

Offensive Terraform module which takes over a subdomain which has a CNAME record pointing to non-existing S3 bucket in target's Route53. The module creates a S3 bucket with a name as subdomain in the specific AWS region that CNAME record is pointing to. Also, it uploads a simple web page with "404 Page Not Found" text.

test-repo

Nothin

tls-poison

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

urlgrab

A golang utility to spider through a website searching for additional links.

virtual-host-discovery

A script to enumerate virtual hosts on a server.