lamjlamlam,github

anew

A tool for adding new lines to files, skipping duplicates

The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more.

autosubtakeover

A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible.

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-dorks

Dorks for Bug Bounty Hunting

cam-virus

Cam VIrus shoots from the target's phone front camera or PC webcam just sending a link.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

crtsh

A Python Script to Get Subdomain using https://crt.sh

csrf-poc-generator

this html file creates a csrf poc form to any http request.

ct_subdomains

An hourly updated list of subdomains gathered from certificate transparency logs

gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

github-subdomains

Find subdomains on GitHub.

gitleaks

Protect and discover secrets using Gitleaks 🔑

gitleaks-action

Protect your secrets using Gitleaks-Action

gitminer

Tool for advanced mining for content on Github

graudit

grep rough audit - source code auditing tool

knock

Knock Subdomain Scan

meg

Fetch many paths for many hosts - without killing the hosts

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests