A Modern Framework for Bug Bounty Hunting

smartrecon is a powerful shell script to automate the recon and finding common vulnerabilities for bug hunter

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

A tool that can help detect and takeover subdomains with dead DNS records

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

A tool for recovering server credentials from a pgadmin4 database

Web Security Checklist (Bug Bounty & Pentesting)

python tools to assist in penetration testing

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Scanning APK file for URIs, endpoints & secrets.

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "wr…

A vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.

Small, fast tool for performing reverse DNS lookups en masse.

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the contr…

Directory/File, DNS and VHost busting tool written in Go

This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.

Reconnaissance tool for GitHub organizations

List of advanced XSS payloads

This repository holds all the list of advanced XSS payloads that can be used in penetration testing. These payloads can be loaded into XSS scanners as well.

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.