amass

In-depth Attack Surface Mapping and Asset Discovery

arjun

HTTP parameter discovery suite.

auto_wordlists

bbtz

BBT - Bug Bounty Tools

breacher

An advanced multithreaded admin panel finder written in python.

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-scripts

Script for Bug Bounty

bugbounty

RepoToStoreBugBountyInfo

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials and fuzzing.

d4rkxss

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

dirsearch

Web path scanner

dnscan

dnsgen

Generates combination of domain names from the provided input.

dot_mfs4

My ~/.msf4 directory

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

github-subdomains

Find subdomains on GitHub

hugo-theme-docdock

Declination of @matcornic Learn theme to Hugo

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

javascript-keylogger

Javascript-based keylogger

jsa

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

jsfscan.sh

Automation for javascript recon in bug bounty.

jsscanner

Js File Scanner

linkfinder

A python script that finds endpoints in JavaScript files

linux-exploit-suggester

Linux privilege escalation auditing tool

mimipenguin

A tool to dump the login password from the current linux user

open-redirect-payloads

Open Redirect Payloads

open-redirect-scanner

open redirect subdomains scanner

param-miner

parameth

This tool can be used to brute discover GET and POST parameters

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.