batamhacker Goto Github PK

puredns

puredns is a subdomain bruteforcing tool that improves massdns to accurately handle wildcard subdomains and DNS poisoning. Easy to use and to integrate into workflows, it ensures the results obtained by public resolvers are clean.

pwk-cheatsheet

pwndb

Search for leaked credentials

pwndoc

Pentest Report Generator

reconftw

Simple script for full recon

reconmap

VAPT (vulnerability assessment and penetration testing) automation and reporting platform.

reconness

ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.

reconnoitre

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

red-team-infrastructure-wiki

Wiki to collect Red Team infrastructure hardening resources

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

redteam-mashup

OSCP Focused Lab Pastable with some general Red Teaming Pastables.

reflector

Burp plugin able to find reflected XSS on page in real-time while browsing on site

rekon

The project contains multiple shell scripts for automating the tasks during recon.

relative-url-extractor

A small tool that extracts relative URLs from a file.

rengine

reNgine is an automated reconnaissance framework meant for information gathering during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

scoutsuite

Multi-Cloud Security Auditing Tool

secguide

List Security Guide

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

secure-coding-handbook

Web Application Secure Coding Handbook resource.

security-template

A static website template for security pages.

securitytesting

slurp

A blazing fast & feature rich Amazon S3 bucket enumerator.

sourcecodereview

Source Code Review resources for Bug Bounty Hunters & Developers. This Repo is updated consistently.

sql-injection-payload-list

🎯 SQL Injection Payload List

sqlipy

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

sumrecon

Web recon script. No need to fear, sumrecon is here!

swiftnessx

A cross-platform note-taking & target-tracking app for penetration testers.