bbhunter

waf-workshop. Python

PostgreSQL-RCE-Extensions. A User Defined function written in C for PostgreSQL Extensions, can be compiled as DLL for RCE on windows machines.

EmailGraffiti. Vandalize old emails. Like an NFT that's easy to prove ownership of.

shotTheWorld. PHP tool that takes screenshots of a given ips/ports combo list and then try to guess the service.

graphql-introspection-analyzer. Graphql introspection query analyzer.

bxss. Alternative to XSS Hunter for blind XSS.

gitpillage. Extract data from a .git directory.

csp-analyzer. Analyze Content-Security-Policy header of a given URL.

openapi_security_scanner. Python

unredacter. Never ever ever use pixelation as a redaction technique

Next.js-Flat-Prototype-Pollution. Prototype Pollution using `flat` with Next.js

cracked_flask. A very simple lab for cracking Flask session cookies

bachelors-thesis-http-request-smuggling. Go

BurpSuiteAutoRepeaterNaming. This extension replaces the default repeater tab name with the URL path of the repeater request.

HolyTips. A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

fuzzparam. Go

Schemas.

TurboDataMiner. The objective of this Burp Suite extension is the flexible and dynamic extraction, correlation, and structured presentation of information from the Burp Suite project as well as the flexible and dynamic on-the-fly modification of outgoing or incoming HTTP requests using Python scripts. Thus, Turbo Data Miner shall aid in gaining a better and faster understanding of the data collected by Burp Suite.

axiom. The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

SonarSearch. A rapid API for the Project Sonar dataset

gwdomains. sub domain wild card filtering tool

iprobe. Take a list of IP addresses and probe for working HTTP and HTTPS servers

pentesting-cookbook. A set of recipes useful in pentesting and red teaming scenarios

pulsar. Network footprint scanner platform. Discover domains and run your custom checks periodically.

knowledge-sharing. Hands-on content for Humla/Puliya sessions at null community

Shodomain. Shodan subdomain finder

recon-pipeline. An automated target reconnaissance pipeline.

go-pillage-registries. Pentester-focused Docker registry tool to enumerate and pull images

Bug-bounty. Ressources for bug bounty hunting

sourcemapper. Reconstruct javascript from a sourcemap in bash

ccrawlen. Crawl Common Crawl data

VulnNodeApp. A vulnerable node.js application

dump. Stuff that doesn't deserves its own repository.

hakrevdns. Small, fast tool for performing reverse DNS lookups en masse.

hakrawler. Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

awesome-mobile-security. An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

LKWA. Lesser Known Web Attack Lab

attack-tools. A set of tools, procedures, and playbooks for performing bug bounties

getJS. A tool to fastly get all javascript sources/files

nosqlinjection_wordlists. This repository contains payload to test NoSQL Injections

pentesterlab-bootcamp. Writeup of what I'm learning with PentesterLab's Bootcamp

social-engineer-toolkit. The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

bbht. A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

ikeforce. Python

aquatone. A Tool for Domain Flyovers

brutesubs. An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

massdns. A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

bug-bounty-reference. Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

AppSecEzine. AppSec Ezine Public Repository.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

IntruderPayloads. A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

security-tools. My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

InputScanner. PHP

JSParser. Python

ctf. My CTF journey since 2015. Stats, writeups, code snippets, notes, challenges.

domain. Setup script for Regon-ng

tbhm. The Bug Hunters Methodology

pentest-bookmarks. a collection of handy bookmarks

scripts. Usefull stuff from around teh internetz

mywebappscripts. A collection of all the lists, scripts and techniques I use while doing web application penetration tests.

pwnwiki.github.io. PwnWiki - The notes section of the pentesters mind.

LinkFinder. A python script that finds endpoints in JavaScript files

bugcrowd-levelup-subdomain-enumeration. This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bucrowd LevelUp 2017 virtual conference