araselmir Goto Github PK

osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

paramspider

Mining parameters from dark corners of Web Archives

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

payloadsandlists

Payloads and Lists

pentest-tools

Custom pentesting tools

postgresql

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

redis

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

repo-security-scanner

CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys

rustscan

🤖 The Modern Port Scanner 🤖

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sourcemapper

Extract JavaScript source trees from Sourcemap files

sqlidetector

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

sqlmap

Automatic SQL injection and database takeover tool

subdomain

subdomainer

Automated tool for domains & subdomains gathering

takeover

test

testrasel

For test

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

unfurl

Pull out bits of URLs provided on stdin

waymore

Find way more from the Wayback Machine!

wesng

Windows Exploit Suggester - Next Generation

wfuzz

Web application fuzzer

windows-exploit-suggester

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

wordlist

wordlist-1