0xsaydoo Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

android-deeplink-parser

apk-framework-detector

🚀🚀🚀Program helps you to detect the major framework or technology used in writing any android app. Just provide the apk 😇😇

awsscrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

beginner-network-pentesting

Notes for Beginner Network Pentesting Course

blind-xss-manager

Never forget where you inject.

blueteam-tools

Tools and Techniques for Blue Team / Incident Response

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

chatgpt-prompts-bug-bounty

ChatGPT Prompts for Bug Bounty & Pentesting

checklists

Red Teaming & Pentesting checklists for various engagements

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

columbus

An advanced subdomain discovery service with fast, powerful and easy to use API and DNS history.

commando-vm

Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]

crackmapexec

A swiss army knife for pentesting networks

dobby

a lightweight, multi-platform, multi-architecture hook framework.

googleplay

Download APK from Google Play or send API requests

intrigue-core

Discover Your Attack Surface!

keypin

obsidian-osint-templates

These templates are suggestions of how the Obsidian notetaking tool can be used during an OSINT investigation. The example data in those files should allow you to make some connections (see what I did there?) between how you record your data during an investigation and some of what the tool can offer FOR FREE!

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pen-andro

Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

pentest-tools

A collection of custom security tools for quick needs.

pentest_note

渗透测试常规操作记录

proteus

A projectdiscovery driven attack surface monitoring bot powered by axiom

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

recon_scripts

Recon scripts for Red Team and Web blackbox auditing

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

redteam-tools

Tools and Techniques for Red Team / Penetration Testing