prongedfork Goto Github PK

haksecuritytxt

Takes a list of domains as the input, checks if they have a security.txt, outputs the results.

heartbleed

A checker (site and tool) for CVE-2014-0160

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

http-request-smuggling

HTTP Request Smuggling Detection Tool

httpx

httpx is a fast and multi-purpose HTTP toolkit allow to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

infosec-vps-establisher

A simple bash script for establishing a new Digital Ocean VPS for bug bounty hunting and penetration testing.

inql

InQL - A Burp Extension for GraphQL Security Testing

iptables-essentials

Iptables Essentials: Common Firewall Rules and Commands.

jaeles

The Swiss Army knife for automated Web Application Testing

joplin

Joplin - an open source note taking and to-do application with synchronization capabilities for Windows, macOS, Linux, Android and iOS. Forum: https://discourse.joplinapp.org/

jsfscan.sh

Automation for javascript recon in bug bounty.

jsscanner

You can read the writeup on this script here

jupyterpen

A Repository dedicated to creating modular and automated penetration testing frameworks utilizing Jupyter Notebooks

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kingofbugbountytips

learn-at-home

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

metafinder

Search for documents in a domain through Google. The objective is to extract metadata

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

my-scripts

Code snippets I find useful

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

mysapadventures

A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters

nmapxml

Golang parser for nmap's XML format

notes

Notes, Not written in the sense to be understandable by public .. Star if you found it useful.

nuclei

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

nuclei-templates

Community curated list of templates for the nuclei engine to find a security vulnerability in application.

offsec