zoidsec

ssrf-king. SSRF plugin for burp Automates SSRF Detection in all of the Request

bxss. Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.

TProxer. A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

pathbuster. A path-normalization pentesting tool.

ssrf-tool. Go

erebus. Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

Bug-Bounty-Tools. The tools I have programmed to help me with bugbounty's

wordlistgen. Generates target specific word lists for Fuzzing with fuff

dnsresolver. A Lightning-Fast DNS Resolver written in Rust 🦀

Zin. A Payload Injector for bugbounties written in go

linkJS. Go

SubNuke. Subdomain Takeover tool with web UI

dorkX. Pipe different tools with google dork Scanner

xsspwn. Cross-Site-Scripting (XSS) Automatic Scanner

hrekt. A really fast http prober.

mailsploit. Sends some one a malicious payload through smtp and starts a listener with metasploit.

gocrawler. Go

tprox. TProx is a fast reverse proxy path traversal detector and directory bruteforcer.

crlfmap. CRLFMap is a tool to find HTTP Splitting vulnerabilities

endzy. Endpoint monitor tool

aem-eye. A very simple AEM detector written in rust.🦀

EvilPhisher. Social Media Phisher

shodan-grabber. Shodan-Grabber is a Node.js tool for scraping IP addresses and other information from Shodan's web interface. It utilizes Puppeteer for web scraping and handles rate limits by implementing retries with delays. The tool can run multiple scraping tasks in parallel and outputs the data to text files.

erebus-templates. Community curated list of templates for the erebus engine to find security vulnerabilities.

recon_db_scripts. Creating a Database for Mass Recon

hostparser. A very fast hostparser.

pdtools. Install and upgrade projectdiscovery tools

bcaem. Fast AEM scope gathering tool for all your public and private BugCrowd Programs

favlens. Favicon similarity scanner powered by local vision models via Ollama. favlens compares site favicons against a base reference and reports matches, helping you expand your attack surface to find sites with similar or identical favicons.

Gxss. Tool for checking reflecting Parameters in a URL.

corsX. Cross Origin Resource Sharing Scanner (CORS Scanner)

fbkiller. Brute Forces A Facebook Account

facebookscraper. Python

wayhack-cli. Go

GoogleDorkScanner.py. Python

specter. SMTP Password Bruteforcer

hakku. Hakku is a android take over tool using various deployment options.

ethicalhackingplayground.

JsX. Recon your way through java script with this tool finding subdomains, parameters, sinks & relative paths.

burp-extensions. A collection of scripts to extend Burp Suite

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF