tk-t0n0y Goto Github PK

naabu-action

A fast port scanner written in go with a focus on reliability and simplicity.

notes

noxss

Faster xss scanner,support reflected-xss and dom-xss

nuclei-templates

My own Custom nuclei templates

oauthscan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

offensivenotion

Notion as a platform for offensive operations

oob-server

A Bind9 server for pentesters to use for Out-of-Band vulnerabilities

osce-complete-guide

OSWE, OSEP, OSED

osint

Collections of tools and methods created to aid in OSINT collection

ote

Generate Email, Register for anything, Get the OTP/Link

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

parallel_simple

simple and personal

payloads

Git All the Payloads! A collection of web attack payloads.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pd-actions

Continuous recon and vulnerability assessment using Github Actions.

pdtm

ProjectDiscovery's Open Source Tool Manager

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

phishmailer

Generate Professional Phishing Emails Fast And Easy

plz-cli

Copilot for your terminal

poc-graphql

Research on GraphQL from an AppSec point of view.

pocsploit

a lightweight, flexible and novel open source poc verification framework

portswigger-labs

A collection of solutions for every PortSwigger Academy Lab (in progress)

progress-burp

Burp Suite extension to track vulnerability assessment progress

proxylogscan

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855).

public-reports

bug bounty disclosed reports

puredns

ee

rapiddns

Rapidly enumerate subdomains and domains using rapiddns.io.

rce-finder

A tool to find good RCE

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

regexp-security-cheatsheet