cmscardoso Goto Github PK

pybelt

The hackers tool belt

pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

python-pentest-tools

Python tools for penetration testers

python-sample

quick-recon.py

Do some quick reconnaissance on a domain-based web-application

recondog

Recon Dog is an all in one tool for all your basic information gathering needs.

reconky-automated_bash_script

Reconky is an amazing Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

reconness

ReconNess Web App Tool

repossessed

A project designed to parse public source code repositories and find various types of vulnerabilities.

rescope

Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

rexploit

RExploit (Router Exploitation) is a tool that search exploits for any router SOHO. It is written on Python and QT.

rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

s3scanner

Scan for open AWS S3 buckets and dump the contents

scanomaly

This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping

screenshooter

Convert your masscan/subdomain-scan results (80,443,8080) into screenshots for better analysis

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

shodansploit

🔎 shodansploit > v1.0.0

shodomain

Shodan subdomain finder

silver

Mass scan IPs for vulnerable services

sleuthql

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

sn1per

Automated Pentest Recon Scanner

snallygaster

Tool to scan for secret files on HTTP servers

sql-injection-payloads

SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...

sqlmate

A friend of SQLmap which will do what you always expected from SQLmap.

sslscrape

SSLScrape | A scanning tool for scaping hostnames from SSL certificates.

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

striker

Striker is an offensive information and vulnerability scanner.

subjs

A tool to get javascript files from a list of URLS or subdomains

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.