okaayfine Goto Github PK

duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

earlybird

EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptography methods, key files and more.

easyg

Here I gather all the resources about PenTesting and Bug Bounty Hunting that I find interesting

ejs-exploit

Remote Code Execution EJS Web Applications using express-fileupload

endgame

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

enumxff

Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions

erebus

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

esf-exchange-shell-finder

This is a personal repo containing scripts in py for detecting shells on vuln exchange servers.

eval_villain

A Firefox Web Extension to improve the discovery of DOM XSS.

exploit_plugins_wordpress

Kumpulan Exploit Wordpress Plugins + Tools + and cara penggunaannya

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

ezxss

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

facebook-bug-bounty-writeups

Facebook Bug Bounties

ffmpeg-hls-ssrf

Server and avi file to exploit FFmpeg HLS parse

fingerprinthub

侦查守卫(ObserverWard)的指纹库

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

fossbilling

Empower your hosting business with FOSSBilling, the free and open-source solution for efficient billing and client management.

free-for-dev

A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev

fuzz.txt

Potentially dangerous files

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

github-search

Tools to perform basic search on GitHub.

gitrob

Reconnaissance tool for GitHub organizations

goblyn

Goblyn is a Python tool focused to enumeration and capture of website files metadata.

good-tools

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

grafana-cve-2021-43798

Grafana Unauthorized arbitrary file reading vulnerability

graphql-engine

Blazing fast, instant realtime GraphQL APIs on Postgres with fine grained access control, also trigger webhooks on database events.