takeoverflo Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

autorev.sh

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 400+ posts and videos.

awesomexss

Awesome XSS stuff

bbscope

Scope gathering tool for HackerOne, Bugcrowd, and Intigriti!

bounty-dashboard

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

burp-fuzzy-encoding-generator

Quickly test various encoding for a given value in Burp Intruder

burp-multistep-csrf-poc

Burp extension to generate multi-step CSRF POC.

burpfastjsonscan

一款基于BurpSuite的被动式FastJson检测插件

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more...

cero

Take a list of hosts and scrape domain names from their TLS certificates

collabfiltrator

Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

cvesearch

Query various sources for CVE proof-of-concepts

deduplicate

Remove duplicate urls from input

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

domlock

subdomains to asn & netblocks

espionage

A basic python based tool for domain ℹ️ information gathering. I am working 💻 on collecting information related to domain whois, history, dns records, web technologies and records from web. Feel free to drop a suggestion 💡

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

ffufplus

You can read the writeup on this script here

gg-dorking

GG Dorking is a tool to generate GitHub and Google dorking for pentesters and bug bounty hunters.

gitscraper

A tool which scrapes public github repositories for common naming conventions in variables, folders and files

guide-aws-hacking

This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS weaknesses you will be verse enough to provide the correct countermeasures.

hackingtool

ALL IN ONE Hacking Tool For Hackers

jeeves

Jeeves SQLI Finder

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Rconnaissance (framework)

key-checker

Go scripts for checking API key / access token validity