0xjson Goto Github PK

aboutsecurity

用于渗透测试和红队基础设施建设的 payload 和 bypass 字典。A list of payload and bypass lists for penetration and red team infrastructure build.

amass

In-depth Attack Surface Mapping and Asset Discovery

arjun

HTTP parameter discovery suite.

awesomexss

Awesome XSS stuff

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

bb-methodology

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

burpsuite

Burp Suite loader version --> ∞

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cobaltstrikesource

Cobaltstrike4.1 Source

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

crtsh

dirsearch

Web path scanner

dnsgrep

Quickly Search Large DNS Datasets

dotfiles

doxycannon

A poorman's proxycannon and botnet, using docker, ovpn files, tor nodes, and dante socks5 proxies

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

ffuf

Fast web fuzzer written in Go

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

gf-patterns-1

Some of the gf patterns which i use

git_search_for_repo

grab url from github

hacking-security-ebooks

Top 100 Hacking & Security E-Books (Free Download)

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

hyprland-0xjson

lazyrecon

This script is intended to automate your reconnaissance process in an organized fashion

linkfinder

A python script that finds endpoints in JavaScript files

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)