kursadalsan Goto Github PK

osint_toolkit

A full stack web application that combines many tools and services for security analysts into a single tool.

pandora

A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.

paraforge

A BurpSuite extension to create a custom word-list of endpoint and parameters for enumeration and fuzzing

paramspider

Mining parameters from dark corners of Web Archives

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with mi

revit

A command-line utility for performing reverse DNS lookups

revwhoix

A simple utility to perform reverse WHOIS lookups using whoisxml API

scrapedin

A tool to scrape LinkedIn without API restrictions for data reconnaissance

screenshot-to-code

Drop in a screenshot and convert it to clean HTML/Tailwind/JS code

sj

A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.

smart-contract-vulnerabilities

A collection of smart contract vulnerabilities along with prevention methods

smersh

Smersh is a pentest oriented collaborative tool used to track the progress of your company's missions.

sourcemapper

Extract JavaScript source trees from Sourcemap files

spoolsploit

A collection of Windows print spooler exploits containerized with other utilities for practical exploitation.

sql-wordlist

sqli_sleeps

ssrf-exploit

an exploit of Server-side request forgery (SSRF)

subdog

subdog is a subdomain enumeration tools, this tool collect number of different sources to create a list of root subdomains

telegram-get-remote-ip

Get IP address on other side audio call in Telegram.

traitor

:arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

userefuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer

wafer

wapiti

Web vulnerability scanner written in Python3

web_hacking

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

whats-spoofing

Whatsapp Exploit to spoofing impersonate of reply message

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xss_vibes

A modern tool written in Python that automates your xss findings.