fstscan

Massive Vulnerability scanner

fud-uuid-shellcode

full-25-keylogger

furlzz

Fuzz iOS URL schemes

fuxploider

File upload vulnerability scanner and exploitation tool.

fuzz.txt

Potentially dangerous files

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

fuzz_dic

参数 | 字典 collections

fuzzable

Framework for Automating Fuzzable Target Discovery with Static Analysis. Featured at Black Hat Arsenal USA 2022.

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

fuzzing101

An step by step fuzzing tutorial. A GitHub Security Lab initiative

fuzzingtool

Software for fuzzing, used on web application pentestings.

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

fzshell

Fuzzy shell completions you didn't know you needed

g3nius-tools-framework

G3nius-Tools framework is a powerfully user-friendly to Server, Client, Network, Signal exploitation tool. We've online support and updates.

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

gallia

Extendable Pentesting Framework

gank-recon

Subdomains enumeration, various scans and testing of some vulnerabilities.

gapichecker

Google maps api key checker for pentesting purpose

garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

garuda

Android Penetration Testing setup tool. Garuda automates the installation of the required tools to perform Android Security Analysis.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

gc2-sheet

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrate data using Google Drive.

gcp_scanner

A comprehensive scanner for Google Cloud

gda-android-reversing-tool

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

gee

🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go