secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

shahad

shahad7278

sn1per

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

spikepp

SPIKE is a protocol fuzzer creation kit. It provides an API that allows a user to create their own fuzzers for network based protocols using the C++ programming language. The tool defines a number of primitives that it makes available to C coders, which allows it to construct fuzzed messages called “SPIKES” that can be sent to a network service to hopefully induce errors. SPIKE was specifically designed to focus on finding exploitable bugs, so it’s an excellent choice for our purposes. SPIKE also includes a simple scripting capability, and within the SPIKE distribution, there are a few command line tools which can act as interpreters to simple text files containing SPIKE primitives.

subover

A Powerful Subdomain Takeover Tool

urldedupe

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

web-cache-vulnerability-scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

wfuzz

Web application fuzzer

xss-exploitation

In This Repository You Will Find The Script Wich You Can Exploit The Xss With You Can See The The Tutorial From Here :-

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List