h4ckdi Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

aem-hacker

aemscan

Adobe Experience Manager Vulnerability Scanner

aldente

macOS tool to limit maximum charging percentage

assetfinder

Find domains and subdomains related to a given domain

automated-scanner

Trying to make automated recon for bug bounties

autorecon

Simple shell script for automated domain recognition with some tools

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bheem

brutespray

Brute-Forcing from Nmap output - Automatically attempts default creds on found services.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

combined-wordlists

A combined wordlists for files and directory discovery

constellationbrands.github.io

subdomain takeover

contact.sh

An OSINT tool to find contacts in order to report security vulnerabilities.

cupp

Common User Passwords Profiler (CUPP)

diodata

Tools, data, and contact lists relevant to The disclose.io Project.

dirsearch

Web path scanner

dnmasscan

A script that can resolve an input file of domains and scan them with masscan

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

dvcs-ripper

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

fast-google-dorks-scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

fuxploider

File upload vulnerability scanner and exploitation tool.

garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

getjs

A tool to fastly get all javascript sources/files