xqd-ai Goto Github PK

0xa0112.github.io

airixss

Finding XSS during recon

allyourcloud

Data collection scripts for All Your Cloud Are Belong To Us conference talk

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

aquatone

A Tool for Domain Flyovers

assetnote

Push notifications for passive DNS data

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

bugbountytemplates

List of reporting templates I have used since I started doing BBH.

bugcrowd-levelup-subdomain-enumeration

FORKED FROM https://github.com/jhaddix/bugcrowd-levelup-subdomain-enumeration. This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bucrowd LevelUp 2017 virtual conference

burpjslinkfinder

Burp Extension for a passive scanning JS files for endpoint links.

bypass-waf-sqlmap

Bypass WAF SQL Injection SQLMAP

contracts

A small collection of potentially useful contract templates

crawler

Crawl website extract links

csprecongo

ctfnote

CTFNote is a collaborative tool aiming to help CTF teams to organise their work.

cve-2019-11510

Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-reverse

directory-files-payload-lists

Directory scans

dirsearch-go

A Go implementation of dirsearch.

djangohunter

Tool designed to help identify incorrectly configured Django applications that are exposing sensitive information.

docker-inurlbr

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found. http://blog.inurl.com.br

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

ensemble

A Bug Bounty Platform that allows hunters to issue commands over a geo-distributed cluster. The ideal user is someone who is attempting to scan multiple bug bounty programs simultaneously, on a recurring basis.

ffuf

Fast web fuzzer written in Go

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

hacktricks

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application