lijinta1984 Goto Github PK

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

offenosint

Beta release

oneforall

OneForAll是一款功能强大的子域收集工具

osint

osint-github-profiles

A list of Github users who distribute tools and tutorials on OSINT (as well as hacking, pentest, and forensics)

osint_team_links

Links for the OSINT Team

osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penta

Open source all-in-one CLI tool to semi-automate pentesting.

pfuzz

pFuzz helps us to bypass web application firewall by using different methods at the same time.

phaser

Automated attack surface mapper and vulnerability scanner

powermeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files from the target domain. After retrieving the files, the metadata associated with them can be analyzed by PowerMeta. Some interesting things commonly found in metadata are usernames, domains, software titles, and computer names.

recon-automation

This script will install all the essential bug bounty tools and will find some basic vulns. I made this script for my daily hunting. The best feature about this script is just run it in background and then analyze the target manually.

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

reconx

reconx is a tool that scas sub-domains, sub-domain takeover, filter dead records, port scan, nuclei scan, and more.

red_hawk

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

rekon

The project contains multiple shell scripts for automating the tasks during recon.

rescope

Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.

resources

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

ripgrep

ripgrep recursively searches directories for a regex pattern while respecting your gitignore

rusty-hog

A suite of secret scanners built in Rust for performance. Based on TruffleHog (https://github.com/dxa4481/truffleHog) which is written in Python.

samlists

Free, libre, effective, and data-driven wordlists for all!

scilla

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

scripthunter

Tool to find JavaScript files on Websites

shell-scripts

This repo contains scripts i used while bug bounty.

shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories: www.shhgit.com

shuffledns

MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

silver

Mass scan IPs for vulnerable services

sitedorks

Search Google/Bing/Ecosia/DuckDuckGo/Yandex/Yahoo for a search term (dork) with a default set of websites, bug bounty programs or custom collection.