mayur1199 Goto Github PK

arjun

HTTP parameter discovery suite.

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

bheem

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bug-bounty-dorks-and-platforms

This are some Dorks and Platform to find the Bug Bounty Programs.

bug_bounty_notes

A collection of notes for bug bounty hunting

burpsuite-for-pentester

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

dirsearch

Web path scanner

exif-samples

Sample images for testing Exif metadata retrieval.

findomain

The complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

github-recon

GitHub Recon — and what you can achieve with it!

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

learn365

This repo is about @harshbothra_ 365 days of learning Tweet & Mindmap collection

nikto

Nikto web server scanner

nmapautomator

A script that you can run in the background!

orhunter

ORhunter is an Open Redirect Vulnerability Scanner which Passively Crawls URLs from 3 Sources & Then Filter Potential URLs based on Parameter Values, then finally hunt them for Unvalidated Open Redirect

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

quickxss

Automating XSS using Bash

race-the-web

Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

rescue

An automated tool for the detection of regexes' slow-matching vulnerabilities.

robotsdisallowed

A curated list of the most common and most interesting robots.txt disallowed directories.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3