batamhacker Goto Github PK

osint_collection

Maintained collection of OSINT related resources. (All Free & Actionable)

osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a manual for testing the security of mobile apps. It describes technical processes for verifying the controls listed in the OWASP Mobile Application Verification Standard (MASVS). The MSTG is meant to provide a baseline set of test cases for black-box and white-box security tests, and to help ensure completeness and consistency of the tests.

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

owasp-web-checklist

OWASP Web Application Security Testing Checklist

payloads

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pd-actions-1

pd-actions-2

Continuous recon and vulnerability assessment using Github Actions.

pd-actions-3

BB-Automation

penetration-testing

List of awesome penetration testing resources, tools and other shiny things

pentest-book

pentest-bookmarks

a collection of handy bookmarks

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

pentest-methodology

Short checklists for penetration testing methodology

pentest-tools

Custom pentesting tools

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

pentesting

Topics Wise details.

pentol

PENTOL - Pentester Toolkit for Fiddler2

poscoict-glueframework.github.io

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

puredns

puredns is a subdomain bruteforcing tool that improves massdns to accurately handle wildcard subdomains and DNS poisoning. Easy to use and to integrate into workflows, it ensures the results obtained by public resolvers are clean.

pwk-cheatsheet

pwndb

Search for leaked credentials

pwndoc

Pentest Report Generator

reconftw

Simple script for full recon

reconmap

VAPT (vulnerability assessment and penetration testing) automation and reporting platform.

reconness

ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.