Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects. - lauritzh/domscan

Bug bounty has become a fast-growing industry with programs launching almost daily bringing along with it a fierce competition among…

An OSINT tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling - n0mi1k/apk2url

My Priv8 Nuclei Templates. Contribute to SirBugs/Priv8-Nuclei-Templates development by creating an account on GitHub.

It is a tool for scanning and exploiting the famous SQL injection vulnerability in more than millions of sites. The exploit was programmed by the TYG team. - 0-d3y/SQLi

Contribute to Bo0oM/ParamPamPam development by creating an account on GitHub.

Scanning APK file for URIs, endpoints & secrets. Contribute to dwisiswant0/apkleaks development by creating an account on GitHub.

jsleak is a tool to find secret , paths or links in the source code during the recon. - byt3hx/jsleak

File upload vulnerability scanner and exploitation tool. - almandin/fuxploider

A python script that finds endpoints in JavaScript files - GerbenJavado/LinkFinder

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target - xnl-h4ck3r/xnLinkFinder

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities - six2dez/reconftw

LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and easy to add checks for new services. - rohsec/LEAKEY

Find subdomains with GPT, for free. Contribute to s0md3v/SubGPT development by creating an account on GitHub.

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei. - ethicalhackingplayground/erebus

A curated list wordlists for bruteforcing and fuzzing - gmelodie/awesome-wordlists

A modern tool written in Python that automates your xss findings. - faiyazahmad07/xss_vibes

Paramalyzer - Burp extension for parameter analysis of large-scale web application penetration tests. - JGillam/burp-paramalyzer

Local File Inclusion Exploitation Tool (mirror). Contribute to hvqzao/liffy development by creating an account on GitHub.

Takes a list of URLs and returns their HTTP response codes - hakluke/hakcheckurl

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon - codingo/dorky

Contribute to nullenc0de/gofuzz development by creating an account on GitHub.

⚡ Blazing-fast tool to grab screenshots of your domain list right from terminal. - GitHub - pwnwriter/haylxon: ⚡ Blazing-fast tool to grab screenshots of your domain list right from terminal.

latest version of scanners for IIS short filename (8.3) disclosure vulnerability - irsdl/IIS-ShortName-Scanner

Contribute to 0ang3el/aem-hacker development by creating an account on GitHub.

A Chrome/Firefox browser extension to show alerts for reflected query params, show Wayback archive links for the current path, show hidden elements and enable disabled elements. - xnl-h4ck3r/XnlReveal

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit. - yeswehack/PwnFox

Extract URLs, paths, secrets, and other interesting bits from JavaScript - BishopFox/jsluice

Burp Plugin to Bypass WAFs through the insertion of Junk Data - assetnote/nowafpls

Small, fast tool for performing reverse DNS lookups en masse. - hakluke/hakrevdns

HTTP parameter discovery suite. Contribute to s0md3v/Arjun development by creating an account on GitHub.

A tool to extract all the urls and paths found in the content of a page (js sources included) - GitHub - ElSicarius/findalllinks: A tool to extract all the urls and paths found in the content of a...

An extension for checking if .git is exposed in visited websites - davtur19/DotGit

A fast tool to scan CRLF vulnerability written in Go - dwisiswant0/crlfuzz

Obtain GraphQL API schema even if the introspection is disabled - nikitastupin/clairvoyance

A really fast http prober. Contribute to ethicalhackingplayground/hrekt development by creating an account on GitHub.

A path-normalization pentesting tool. Contribute to ethicalhackingplayground/pathbuster development by creating an account on GitHub.

A very simple AEM detector written in rust.🦀. Contribute to ethicalhackingplayground/aem-eye development by creating an account on GitHub.

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist - xnl-h4ck3r/GAP-Burp-Extension

Nodesub is a command-line tool for finding subdomains in bug bounty programs - pikpikcu/nodesub