thetowsif Goto Github PK

ahnaf

androspy

An Android RAT that written in C# by me

asn

ASN / RPKI validity / BGP stats / IPv4v6 / Prefix / URL / ASPath / Organization / IP reputation / IP geolocation / IP fingerprinting / Network recon / lookup API server / Web traceroute server

assetnote-wordlist-fetcher

A script that fetches only the the latest wordlists from Assetnote wordlist archive

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

backdatedb4ckd00r

Config files for my GitHub profile.

basic-portfolio

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bbht-fix

Nahamsec bbht code fixes

bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

burp-suite

|| Activate Burp Suite Pro with Key-Generator and Key-Loader ||

clasic-portfolio

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security (code scanning), LGTM.com, and LGTM Enterprise

cracker-rdp

A RDP By Cracker911181. For Educational Purpose.

ctf

cyber-security-resources

dirsearch-db

Web path scanner

doser.py

DoS tool for HTTP requests (inspired by hulk but has more functionalities)

fresh-resolvers

List of Hourly Updated Fresh DNS resolvers

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzing101-exercise

An step by step fuzzing tutorial. A GitHub Security Lab initiative

gf-pattern-collection

graudit

grep rough audit - source code auditing tool

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

httproby

Just a basic HTTP probing tools

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228