tk-t0n0y Goto Github PK

token-reverser

Words list generator to crack security tokens

torghost

TorGhost is an anonymization script. TorGhost redirects all internet traffic through SOCKS5 tor proxy. DNS requests are also redirected via tor, thus preventing DNSLeak. The scripts also disables unsafe packets exiting the system. Some packets like ping request can compromise your identity.

tproxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

trufflehog

Find credentials all over the place

udork

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications, and so on.

unew

A tool for append URLs, skipping duplicates/paths & combine parameters.

unexpected_information

Unexpected information 是用于标记请求包中的一些敏感信息、JS接口和一些特殊字段的BurpSuite 插件。

unicode-mapping-on-domain-names

url-tracker

Change monitoring app that checks the content of web pages in different periods.

vhosts-sieve

Searching for virtual hosts among non-resolvable domains

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

vulnerability_ghost

vulnerability_ghost love you 🔥

waf-workshop

wafninja

WAFNinja is a tool which contains two functions to attack Web Application Firewalls.

wahh_extras

The Web Application Hacker's Handbook - Extra Content

wayback-machine-downloader

Download an entire website from the Wayback Machine.

web-application-pentest-checklist

web-fuzzing-box

Web Fuzzing Box - Web 模糊测试字典与一些Payloads，主要包含：弱口令暴力破解、目录以及文件枚举、Web漏洞...字典运用于实战案例：https://gh0st.cn/archives/2019-11-11/1

web-security-academy

Solutions for Web Security Academy

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

webhunt

Web App bug hunting

weblogicscanner

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14882、CVE-2020-14883

website-scans

Scheduled scans of multiple websites

weird_proxies

Reverse proxies cheatsheet

wordlist404

Wordlist for brute-forcing and discover hidden things

wordlists

A catalog of wordlists to use with Nozaki or other fuzzer

wordlistsmith

A tool to quickly scrape a website and generate a wordlist. Multithreading capable.

x8

Hidden parameters discovery suite

x8-burp

Hidden parameters discovery suite

xorpass

Encoder to bypass WAF filters using XOR operations.