xr0r Goto Github PK

adminbomber

bruteforce the admin panel

advanced-sql-injection-for-awae

all-about-apikey

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

arjun

HTTP parameter discovery suite.

autopoisoner

Web cache poisoning vulnerability scanner.

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

bbtz

BBT - Bug Bounty Tools (examples💡)

breacher

An advanced multithreaded admin panel finder written in python.

broken-link-checker

Find broken links, missing images, etc within your HTML.

bsqli

timebased blind sqli with 99% success rate

bugbounty

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

chameleon

cloakquest3r

Uncover the true IP address of websites safeguarded by Cloudflare & Others

cloudpeler

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

collectvars

collectvars collects JavaScript variables, highlights risky ones, and helps you understand code structure, while you casually browse.

conferences

Conference presentation slides

custombsqli

de4js

JavaScript Deobfuscator and Unpacker

directory-files-payload-lists

Directory scans

dmarc-subdomains

Tool to parse subdomains from dmarc.live

dockerspy

DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.

docs

dorks

Bug Bounty Dorks

favicon-hash.kmsec.uk

Cloudflare Worker to get favicon hashes for Shodan hunting

ffufwebparser

Parse FFUF results in GUI with option to sort based by response code , size , keyword

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

g-dorks

google dorks for locate important files, information and accesses

gip

Google IP Search Engine