secwiththamhv Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

broken-link-checker

Find broken links, missing images, etc within your HTML.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbountydorks

This repo contains all the Bug Bounty Dorks sourced from different awesome sources and compiled at one place

burpfakeip

一个用于伪造ip地址进行爆破的Burp Suite插件

can-i-take-over-xyz-v2

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

clickjack

Web based clickjack poc creator tool in python

clickjackingpoc

A Proof of Concept for Clickjacking Attacks

commix

Automated All-in-One OS Command Injection Exploitation Tool.

course-resources

csrf-poc-generator

This HTML file creates a CSRF PoC form to any HTTP request.

exif-samples

Sample images for testing Exif metadata retrieval.

ffmpeg-avi-m3u-xbin

findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

findomain

The complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

hackbar

HackBar is a security audit tool that will enable you to pentest websites more easily. ... You can use it to check site security by performing SQL injections, XSS holes and more. It also has a user-friendly interface that makes it easy for you to do fuzz testing, hash generation, encoding and more.

hostilesubbruteforcer

jira-scan

CVE-2017-9506 - SSRF

knock

Knock Subdomain Scan

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

linkfinder

A python script that finds endpoints in JavaScript files

norlcheck

Quick and dirty script to check for No RL

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

paramspider

Mining parameters from dark corners of Web Archives

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF