m-0x01 Goto Github PK

aquatone

A Tool for Domain Flyovers

brutexss

BruteXSS is a tool written in python simply to find XSS vulnerabilities in web application. This tool was originally developed by Shawar Khan in CLI. I just redesigned it and made it GUI for more convienience.

cupp

Common User Passwords Profiler (CUPP)

dirsearch

Web path scanner

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

ffuf

Fast web fuzzer written in Go

gobuster

Directory/File, DNS and VHost busting tool written in Go

graphqlmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes. - Do not use for illegal testing ;)

mobile-security-framework-mobsf

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

php-reverse-shell

phpbash

A semi-interactive PHP shell compressed into a single file.

qark

Tool to look for several security related Android application vulnerabilities

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

smali

smali/baksmali

sqlmap

Automatic SQL injection and database takeover tool

ssrfmap

Automatic SSRF fuzzer and exploitation tool

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

wfuzz

Web application fuzzer

xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.

xsstrike

Most advanced XSS scanner.