affilares Goto Github PK

takeover

Sub-Domain TakeOver Vulnerability Scanner

tee-reversing

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

telegram-bot-cli

This is a command line tool I use when I want to get notified, on Telegram (on my phone), that something has finished running (on my laptop).

thc-tips-tricks-hacks-cheat-sheet

Various tips & tricks

the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the-hackers-hardware-toolkit

The best hacker's gadgets for Red Team pentesters and security researchers.

theftfuzzer

TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.

thegreatrecon

theharvester

E-mails, subdomains and names Harvester - OSINT

tiny-xss-payloads

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

tiscripts

Turbo Intruder Scripts

tko-subs

A tool that can help detect and takeover subdomains with dead DNS records

tokenbreaker

JSON RSA to HMAC and None Algorithm Vulnerability POC

toolbox-pentest-web

Docker toolbox for pentest of web based application.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

totalrecon

TotalRecon installs all the recon tools you need

tproxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

trivy

Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

trustmealready

Disable SSL verification and pinning on Android, system-wide

twint

An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, following, Tweets and more while evading most API limitations.

udemy-downloader-gui

A desktop application for downloading Udemy Courses

udp-hunter

Network assessment tool for various UDP Services covering both IPv4 and IPv6 protocols

untrusted-types

unwebpack-sourcemap

Extract uncompiled, uncompressed SPA code from Webpack source maps.

url-tracker

Change monitoring app that checks the content of web pages in different periods.

urldedupe

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

urlprobe

Urls status code & content length checker