brahimjr01 Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

arabicwebappspentesting

This repo will contain POC, demo files, and any links given during the Arab web application penetration testing course.

brahimjr01

Config files for my GitHub profile.

centrify

yi im do't

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

dirsearch

Web path scanner

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gf

A wrapper around grep, to help you grep for things

github

testing subdomain takeober

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

metasploit-framework

Metasploit Framework

open-redirect-payloads

Open Redirect Payloads

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

personal-capital

recon_profile

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shodandorks

wafpass

Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF.

wordlist

~300,000 English words

xss-payloads

List of advanced XSS payloads