vishal9066 Goto Github PK

puff

Clientside vulnerability / reflected xss fuzzer

pwnfox

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

python-learning

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

quiver

Quiver is the tool to manage all of your tools for bug bounty hunting and penetration testing.

real-estate

Django web application for real estate management

recon-methodology

Recon Methodology

reconnote

Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals & bug-hunters

regexapi

list of regex for apis

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

rms-runtime-mobile-security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

robotium

Android UI Testing

rock-on

Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.

rope

Hack the Box Machine

s3enum

Fast Amazon S3 bucket enumeration tool for pentesters.

s3scanner

Scan for open S3 buckets and dump the contents

s3viewer

Publicly Open Amazon AWS S3 Bucket Viewer

sap_recon

PoC for CVE-2020-6287, CVE-2020-6286 (SAP RECON vulnerability)

sdk

Public SDK for Intelligence X

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

secretx

encrypt and decrypt code utils

securitytesting

securitytips

sed-awk-cheatsheet

Things you can do with sed and awk

sharpshooter

Payload Generation Framework

shiro-exploit

Shiro反序列化利用工具，支持key爆破，配合ysoserial，生成回显Payload

shuffledns

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.