syntaxerror4 Goto Github PK

-img-src-x-onerror-alert-56-

-img-src-x-onerror-alert-6-

"><img src=x onerror=alert('6');>

003recon

Some tools to automate recon - 003random

aem-hacker

aquatone

A Tool for Domain Flyovers

atlas

Quick SQLMap Tamper Suggester

awesome-web-security

🐶 A curated list of Web Security materials and resources.

bountydash

BountyDash is a tool to combine your rewards from all platforms, giving you insights about your progress and bug hunting patterns.

calexe

Calendar Exploit.

cansina

Web Content Discovery Tool

chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

crlf-injection-scanner

Command line tool for testing CRLF injection on list of domains.

ezxss

ezXSS is an easy way to test (blind) XSS

gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

ghhdb-github-hacking-database

Github Hacking Database - My personal collection of Github Dorks to search for Confidential Information (Yes, it's a Github version of Google Dorks)

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

inql

InQL - A Burp Extension for GraphQL Security Testing

interestingfilescanner

Burp extension

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

leaklooker

Find open databases with Shodan

my-shodan-scripts

Collection of Scripts for shodan searching stuff.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-resources

recon-my-way

This repository created for personal use and added tools from my latest blog post.

sanity-gatsby-blog

Blog with Gatsby

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

secretz

secretz, minimizing the large attack surface of Travis CI

ssrf-testing

SSRF (Server Side Request Forgery) testing resources