cmscardoso Goto Github PK

420

Automated XSS Vulnerability Finder

adapt

ADAPT is a tool that performs automated Penetration Testing for WebApps.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

amass

In-depth subdomain enumeration written in Go

amass-1

In-depth DNS Enumeration and Network Mapping

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

aquatone

A Tool for Domain Flyovers

arjun

Arjun is a python script for finding hidden GET & POST parameters.

asdapoc

asnlookup

Look up IP addresses (IPv4 & IPv6) registered and owned by a specific organization for reconnaissance purposes.

assessment-mindset

Security Mindmap that could be useful for the infosec community when doing pentest, bug bounty or red-team assessments.

autocon

awesome-awesome-awesome

Awesome list of repositories of awesome lists 🤷‍♀️

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-mitre-attack

A curated list of awesome resources related to Mitre ATT&CK™ Framework

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-python

A curated list of awesome Python frameworks, libraries and software.

awesome-selfhosted

This is a list of Free Software network services and web applications which can be hosted locally. Selfhosting is the process of locally hosting and managing applications instead of renting from SaaS providers.

awesomexss

Awesome XSS stuff

bb-datas

Tools and datas related to bug bounty programs.

bb-reports-templates

My small collection of reports templates

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

bitvijays.github.io-sphinx

Sphinx

blacksheepwall

blacksheepwall is a hostname reconnaissance tool

blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

blog_backup

A repository with various tutorials on how to do things in Pentesting, setup environments and other things

bounty-targets-data

This repo contains hourly-updated data dumps of Hackerone/Bugcrowd scopes that are eligible for reports

breacher

An advanced multithreaded admin panel finder written in python.