A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Focus on prompting and generating

Best and simplest tool for website change detection, web page monitoring, and website change alerts. Perfect for tracking content changes, price drops, restock alerts, and website defacement monito…

🐶 A curated list of Web Security materials and resources.

The recursive internet scanner for hackers. 🧡

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

Top disclosed reports from HackerOne

HTTP parameter discovery suite.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

A python script that finds endpoints in JavaScript files

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

A collection of custom security tools for quick needs.

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

Projects for security students

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!

A tool to dump a git repository from a website

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

Reverse proxies cheatsheet

NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration te…

declutters url lists for crawling/pentesting

Burp Suite Certified Practitioner Exam Study

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

The Simple Agent Development Kit.

Making Favicon.ico based Recon Great again !

Shodan Eye This tool collects all the information about all devices directly connected to the internet using the specified keywords that you enter. Author: Jolanda de Koff

Enumerate the permissions associated with AWS credential set