Lists (18)
Starred repositories
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
Automated & Manual Wordlists provided by Assetnote
The all-in-one Desktop & Docker AI application with full RAG and AI Agent capabilities.
10,000 H1 Disclosed Reports
A tool for extract Endpoints, URLs and Secrets from contents
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Fetches javascript file from a list of URLS or subdomains.
Go scanner to find web cache poisoning vulnerabilities in a list of URLs
A basic tool to check for XSS vulnerabilities. It takes a list of URLs and checks if the parameter values appear in the response.
Docker toolbox with different scripts having for the objective to perform different kinds of attacks against JWT tokens.
POC about usage of JSON Web Tokens (JWT) in a secure way.
POC in order to explore and describe a proposition for the automation of the testing of the authorization matrix.
A list of resources for those interested in getting started in bug bounties
Th3Inspector 🕵️ Best Tool For Information Gathering 🔎
GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems
Joplin - the secure note taking and to-do app with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
A Python tool to automate some dorking stuff to find information disclosures.
A collection of resources to learn Reverse Engineering from start!
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
