gitrob by michenriksen

Reconnaissance tool for GitHub organizations

updated at Nov. 16, 2024, 11:29 a.m.

154 +0

5,938 +3

832 +6

beef by beefproject

The Browser Exploitation Framework Project

updated at Nov. 16, 2024, 11:59 a.m.

444 -1

9,856 +18

2,180 +1

subDomainsBrute by lijiejie

A fast sub domain brute tool for pentesters

updated at Nov. 16, 2024, 12:06 p.m.

116 +0

3,488 +2

1,010 +0

Astra by flipkart-incubator

Automated Security Testing For REST API's

updated at Nov. 16, 2024, 1:22 p.m.

86 +0

2,512 +6

402 +1

fuzzdb by fuzzdb-project

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

updated at Nov. 16, 2024, 2:50 p.m.

366 +0

8,244 +8

2,098 -1

XSStrike by UltimateHackers

Most advanced XSS scanner.

updated at Nov. 16, 2024, 3:25 p.m.

274 +0

13,376 +28

1,906 +3

ReconDog by UltimateHackers

Reconnaissance Swiss Army Knife

updated at Nov. 16, 2024, 4:05 p.m.

83 +0

1,814 +5

340 +0

webshell by tennc

This is a webshell open source project

updated at Nov. 16, 2024, 6:10 p.m.

488 +0

10,123 +15

5,574 +1

bug-bounty-reference by ngalongc

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

updated at Nov. 16, 2024, 7:50 p.m.

239 +0

3,754 +4

988 -1

social_mapper by Greenwolf

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)

updated at Nov. 16, 2024, 8:30 p.m.

225 +0

3,808 +2

788 +0

domato by googleprojectzero

DOM fuzzer

updated at Nov. 16, 2024, 10:14 p.m.

67 +0

1,695 +9

278 +0

a2sv by hahwul

Auto Scanning to SSL Vulnerability

updated at Nov. 16, 2024, 10:36 p.m.

46 +0

627 +1

169 +0

DOMPurify by cure53

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

updated at Nov. 16, 2024, 11:22 p.m.

151 -1

14,021 +40

726 +3

Raccoon by evyatarmeged

A high performance offensive security tool for reconnaissance and vulnerability scanning

updated at Nov. 16, 2024, 11:31 p.m.

108 +0

3,090 +2

400 +0

aquatone by michenriksen

A Tool for Domain Flyovers

updated at Nov. 16, 2024, 11:32 p.m.

136 +0

5,643 +2

885 +2

dirhunt by Nekmo

Find web directories without bruteforce

updated at Nov. 16, 2024, 11:46 p.m.

33 +0

1,770 +5

255 +0

mitmproxy by mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

updated at Nov. 17, 2024, 12:42 a.m.

624 +0

36,847 +91

4,041 +6

radare2 by radareorg

UNIX-like reverse engineering framework and command-line toolset

updated at Nov. 17, 2024, 1:24 a.m.

488 +1

20,710 +33

3,006 +3

gitleaks by gitleaks

Protect and discover secrets using Gitleaks 🔑

updated at Nov. 17, 2024, 2:12 a.m.

163 +0

17,953 +114

1,469 +6

juice-shop by juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

updated at Nov. 17, 2024, 2:16 a.m.

161 +0

10,468 +20

10,939 +47