premhcz Goto Github PK

megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

mind-maps

Mind-Maps of Several Things

myrecon.py

My recon script

oneforall

OneForAll是一款功能强大的子域收集工具

open-redirect-scanner

open redirect subdomains scanner

oralyzer

Open Redirection Analyzer

paramscraper

Burp Suite extension to help bug hunters find more inputs

paramspider

Mining parameters from dark corners of Web Archives

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-resources

pentest-tools

Custom pentesting tools

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

pwncat

Fancy reverse and bind shell handler

recon

information gathering

recon.sh

A toolset to track and organize output of reconnaissance tools

recon_profile

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

scanomaly

This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping

script

My Impotant scripts and command while performing assessment.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security-tools

Collection of small security tools created mostly in Python. CTFs, pentests and so on

sql-injection-payloads

SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...

ssrf-finder

Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.

ssrf-sheriff

A simple SSRF-testing sheriff written in Go

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrf_proxy

SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.

subover

A Powerful Subdomain Takeover Tool

testcrlf

PHP tool to test CRLF

thsosrtl

Repo for tools