xlocux Goto Github PK

adobe-experience-manager

aemscan

Adobe Experience Manager Vulnerability Scanner

atlassian-jira-pentesting

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

brojack

Broken Link Hijack tool that checks also for available domain

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

c-sharp

Some .NET stuff

checklists-tips

mixed documents and checklists

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

domainer

Simple domain checker via domainr.com

extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

github_token_checker

Simple python script to check GitHub token validity

golinkfinder

A fast and minimal JS endpoint extractor

herokutko

heroku takeover page

interlace

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

jscatcher

Grab javascript links/files from a single url or list.

kalitorify

Transparent proxy through Tor for Kali Linux OS

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

mubeng

An incredibly fast proxy checker & IP rotator with ease.

netlify-tko

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

proxy-list

A list of free, public, forward proxy servers. UPDATED DAILY!

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

sap-wordlist

scoutsuite

Multi-Cloud Security Auditing Tool

scripts

sex

Secret EXtractor from local dris/files (apk,html etc)