haka110 Goto Github PK

toutatis

Toutatis is a tool that allows you to extract information from instagrams accounts such as e-mails, phone numbers and more

trufflehog

Find credentials all over the place

unfurl

Pull out bits of URLs provided on stdin

usefulshodan

A Python3 for-loop wrapper for the Shodan Command-Line Interface (CLI).

userefuzz

User-Agent , X-Forwarded-For and Referer SQLI Fuzzer

violent-python

Code that I adapted from the "Violent Python" book

vulnerabilidades

wafer

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

waymore

Find way more from the Wayback Machine!

web-app-pentest-checklist

A OWASP Based Checklist With 500+ Test Cases

web-components

web-hack-mirror

A copy of the Attrition.org web page hack / defacement mirror. Details: https://attrition.org/mirror/

webcopilot

An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities.

webjars-swagger-xss

PoC for XSS in org.webjars:swagger-ui [3.14.2, 3.36.2]

wordlist

wordlist-for-bug-bounty

I collected it to help the bug hunter get a reward

wordlists

Wordlists for Fuzzing

wordlists-1

Infosec Wordlists

wordlists-content-discovery

Web content discovery wordlists

write-ups

Write-ups of my findings.

writeup

x

x8

Hidden parameters discovery suite

xentor-xss

xless

The Serverless Blind XSS App

xnlinkfinder

A python tool used to discover endpoints (and potential parameters) for a given target

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

xs1

One XSS automation tool

xsrfprobe

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.