.github

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

aiohttp

Asynchronous HTTP client/server framework for asyncio and Python

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-crawler

A collection of awesome web crawler,spider in different languages

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-hacker-note-taking

Awesome note-taking apps for hackers & pentesters !

awesome-hacking-lists

平常看到好的渗透hacking工具和多领域效率工具的集合

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

awesome-waf

🔥 Everything about web-application firewalls (WAF).

awesome-web-security

🐶 A curated list of Web Security materials and resources.

bash-oneliner

A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

bofs

Collection of Beacon Object Files

bug-bounty-toolz

BBT - Bug Bounty Tools

camcheckr

Tool for Reconnaissance on a web camera.

censei

A Python script to search Censys.io for hosts and services using API.

chaoskobra

Another Sub-Domain Enumeration Tools for normies written in python...

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

crtiflux.js

A WebApp for Sub-Domain Enumeration using `crt.sh` without using any api key.

curs3af

Tool to check if a website is protected by a WAF(HTTP/HTTPS).

darkside

Tool Information Gathering & social engineering Write By [Python,JS,PHP]

db

Bugbounty utility to store the list of the enumerated subdomains into an sqlite3 db [one liner style / Pipe and save]

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

devops-exercises

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

dr4kul4

Sub-Domain Enumeration using crt.sh for enumeration. No API key required.

finalrecon

The Last Web Recon Tool You'll Need

freaker

automated application fingerprinting, vulnerability testing & exploitation framework for kenzer