akbruster Goto Github PK

scripts

Scripts I use during pentest engagements.

secretfinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

servicenow

ServiceNow widge-simple-list misconfiguration scanner

sewa

shortscan

An IIS short filename enumeration tool

shuffledns

MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

solid

S.O.L.I.D Principles (java examples)

subdomain-take

subdomainenum

subenum

bash script for Subdomain Enumeration

subjs

Fetches javascript file from a list of URLS or subdomains.

sublist3r

Fast subdomains enumeration tool for penetration testers

subrake

A Subdomain Enumeration and Validation tool for Bug Bounty and Pentesters.

tainning

trufflehog

Find credentials all over the place

uncover

Quickly discover exposed hosts on the internet using multiple search engine.

unfurl

Pull out bits of URLs provided on stdin

unimap

Scan only once by IP address and reduce scan times with Nmap for large amounts of data.

urlprobe

Urls status code & content length checker

vampi

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

vilicus

vīlicus is a bug bounty api dashboard

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain

waymore

Find way more from the Wayback Machine!

weaponize-your-burp

Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite

web-hacking-playground

Web application with vulnerabilities found in real cases, both in pentests and in Bug Bounty programs.

webrecon

Recon script for wildcard domain web scopes... (for use on synack red team)

websecurity-ita-2009

A training course on Web Security, Exploit Development and Source Code Auditing from 2009.

whoenum

Mass querying whois records

wordlist

wp-update-confusion

WordPress Plugin Update Confusion