A script for automating the reconnaissance process which is the initial phase of a pentesting activity

An awesome README template to jumpstart your projects!

Next-gen browser and mobile automation test framework for Node.js

Fast and customizable vulnerability scanner For JIRA written in Python

cewl wordlist generator from https://digi.ninja/projects/cewl.php

crunch wordlist generator from https://sourceforge.net/projects/crunch-wordlist/

Quick SQLMap Tamper Suggester

A simple but powerful anime downloader and streamer.

Fast passive subdomain enumeration tool.

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

🐶 A curated list of Web Security materials and resources.

Reverse proxies cheatsheet

A script to enumerate virtual hosts on a server.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

Create your Custom Wordlist For Fuzzing

A collection of tools to perform searches on GitHub.

the only cheat sheet you need

Fast web fuzzer written in Go

Find domains and subdomains related to a given domain

Take a list of domains and probe for working HTTP and HTTPS servers

aquatone results for sites with bug bountys

A free utility to help web developers watch and manipulate network traffic from their AJAX applications.

Assign agents by label or by name