burak40 Goto Github PK

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

ghhdb-github-hacking-database

Github Hacking Database - My personal collection of Github Dorks to search for Confidential Information (Yes, it's a Github version of Google Dorks)

githack

A `.git` folder disclosure exploit

github-dorks

Find leaked secrets via github search

github-dorks-1

goofuzz

GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

google-dorks

Common google dorks and others you prolly donn know :P

google-dorks-1

I'm uploading dorks here.

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

hackvault

A container repository for my public web hacks!

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

hashcat-rule

Rule for hashcat or john. Aiming to crack how people generate their password

hoaxshell

An unconventional Windows reverse shell, currently undetected by Microsoft Defender and other AV solutions, solely based on http(s) traffic.

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

ics_iot_shodan_dorks

imagewriter

Utility for writing raw disk images & hybrid isos to USB keys

impacket

Impacket is a collection of Python classes for working with network protocols.

intelligent-trading-bot

Intelligent Trading Bot: Automatically generating signals and trading based on machine learning and feature engineering

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

inventory

Asset inventory on public bug bounty programs.

katana

Python Tool that gives you the ability to run Advanced Google Queries (Known as Google Dorks - Google Dorking)

knowledgesharing

lazyrecon

An automated approach to performing recon for bug bounty hunting and penetration testing.

linux-privilege-escalation

This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machines and CTFs with examples.

magicrecon

MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.

maskphish

Introducing "URL Making Technology" to the world for the very FIRST TIME. Give a Mask to Phishing URL like a PRO.. A MUST have tool for Phishing.

microburst

A collection of scripts for assessing Microsoft Azure security

modlishka

Modlishka. Reverse Proxy.