beingn00b Goto Github PK

200

Python script to check the site is alive or not

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

awesome-mobile-security

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

awesome-waf

🔥 Everything you'll need to know about web-application firewalls (WAF).

awesomexss

Awesome XSS stuff

bu4lyf-rdp

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

critical-file-payloads

cyber-security-resources

I have collected many resources and may add many more in the future thanks :)

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

fuzz

Fuzzing

golden-guide-for-pentesting

Golden Guide

katana

Katana - Automatic CTF Challenge Solver in Python3

mirrorscript

mosint

An automated e-mail OSINT tool

obsidian-pentesting-vault

Sample Obsidian's vault for web pentesting

oneforall

OneForAll是一款功能强大的子域收集工具

oscp-prep

osint

OSINT Resource

own-the-recon

This repository is created for personal use and added tools from my blog post.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pen-andro

Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder

pentest-book

recon

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

subenum

telbot

tidos-framework

The Offensive Manual Web Application Penetration Testing Framework.

webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.