asadanwar90 Goto Github PK

responder

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

reverse-shell

Reverse Shell as a Service

scanners-box

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

secretz

secretz, minimizing the large attack surface of Travis CI

securitytips

secutils

Random utilities from my security projects that might be useful to others

services-names-wordlist

services-names-wordlist

sha256-animation

Animation of the SHA-256 hash function in your terminal.

shadowclone

Unleash the power of cloud

shhgit

Ah shhgit! Find GitHub secrets in real time

slack-watchman

Monitoring your Slack workspaces for sensitive information

spiderfoot

SpiderFoot automates OSINT so you can focus on analysis.

sql-injection-payloads

SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...

ssrf-sheriff

A simple SSRF-testing sheriff written in Go

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrf_proxy

SSRF Proxy facilitates tunneling HTTP communications through servers vulnerable to Server-Side Request Forgery.

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

sub.sh

Online Subdomain Detect Script

sudomy

Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format

swf_json_csrf

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

the-nuclei-templates

Nuclei templates written by us.

theftfuzzer

TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.

tproxer

A Burp Suite extension made to automate the process of finding reverse proxy path based SSRF.

trufflehog

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

viewgen

viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

web-attack-cheat-sheet

Web Attack Cheat Sheet

web-fuzz-wordlists

Common Web Managers Fuzz Wordlists