7rust Goto Github PK

003recon

Some tools to automate recon - 003random

0x0p1n3r

0x0p1n3r is set of combination of other tools and one line scripts to find subdomains easily

403bypasser

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

api-endpoints

Api endpoints for web application penetration testing

authentication_injection

Automated authentication injection for XPATH and SQL vulnerabilities

autorecon

Simple shell script for automated domain recognition with some tools

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awrs

AWRS: Auto Web Recon Script that enum, scan and exploit in some cases.

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

bolt

CSRF Scanner

broxy

An HTTP/HTTPS intercept proxy written in Go.

bruteforce-lists

Some files for bruteforcing certain things.

bucketkicker

Brute force AWS bucket finder

bug-bounty

Ressources for bug bounty hunting

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-bounty-toolz

BBT - Bug Bounty Tools

byp4xx

Simple bash script to bypass "403 Forbidden" messages with well-known methods discussed in #bugbountytips

censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

clickjackingxd

cloudbrute

Awesome cloud enumerator

content-discovery

content-type-research

Content-Type Research

continuous-nuclei

Running nuclei Continuously

crlf-one-liner

A simple Bash one liner with aim to automate CRLF vulnerability scanning.

crtfinder

Simple script tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness