danzee1 Goto Github PK

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-management

Simple webinterface combining different recon tools.

petereport

PeTeReport is an open-source application vulnerability reporting tool.

php-antimalware-scanner

AMWScan (PHP Antimalware Scanner) is a free tool to scan php files and analyze your project to find any malicious code inside it.

portscan.sh

All in one port scanning script.

ppfuzz

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

protections-artifacts

Elastic Security detection content for Endpoint

protoscan

Prototype Pollution Scanner

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

puredns

puredns is a subdomain bruteforcing tool that improves massdns to accurately handle wildcard subdomains and DNS poisoning. Easy to use and to integrate into workflows, it ensures the results obtained by public resolvers are clean.

qcsuper

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

quickxss

Automating XSS using Bash

rapidscan

:santa: The Multi-Tool Web Vulnerability Scanner.

recon

reconftw

Simple script for full recon

reconpi

ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.

reconscan

Network reconnaissance and vulnerability assessment tools.

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

repo-supervisor

Scan your code for security misconfiguration, search for passwords and secrets. :mag:

request_smuggler

Http request smuggling vulnerability scanner

rush

A cross-platform command-line tool for executing jobs in parallel

rustscan

Faster Nmap Scanning with Rust

sandmap

Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

scaffold-eth

🏗 forkable Ethereum dev stack focused on fast product iterations

scanner-cli

A project security/vulnerability/risk scanning tool

scapy

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

scv-list

Smart Contract Vulnerabilities (SCV) List

shennina

Automating Host Exploitation with AI

shodan-filters

A list of shodan filters