An utility for managing installations of the Linux distributions in Termux.

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty

A tool for adding new lines to files, skipping duplicates

An IIS short filename enumeration tool

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

An insane list of all dorks taken from everywhere from various different sources.

A next-generation crawling and spidering framework.

An auto-updating list of shodan dorks with info on the amount of results they return!

NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications

Automation for javascript recon in bug bounty.

Make JSON greppable!

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

CORS Misconfiguration Scanner

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.

A script to extract domain names from Content Security Policy(CSP) headers

Training for Golang (go language)

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

a tiny tool for swf hacking, just browse it:)

A Broken-URL Checker

A collection of various awesome lists for hackers, pentesters and security researchers

Interactive roadmaps, guides and other educational content to help developers grow in their careers.

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

Never forget where you inject.

🦉🔎 A simple tool to audit your AWS/GCP infrastructure for misconfiguration or potential security issues with plugins integration

Damn Vulnerable PHP Application (DVPA) - It is Lab Written in The PHP lang, Which Contains PHP Type Juggling - RCE Challenges

Pentesting Reporting Tool

Simple Google Dorks search tool

ParamChanger is a tool allowing you to replace the parameters of a list of urls by a payload entered as an argument