jpwnage,github

assetnote_wordlist

Automated & Manual Wordlists provided by Assetnote

AssetViz simplifies the visualization of subdomains from input files, presenting them as a coherent mind map. Ideal for penetration testers and bug bounty hunters conducting reconnaissance, AssetViz provides intuitive insights into domain structures for informed decision-making.

authorizgrapher

bbot

A recursive internet scanner for hackers.

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

cloakquest3r

Uncover the true IP address of websites safeguarded by Cloudflare & Others

commonspeak2

Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

cook

A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

csprecon

Discover new target domains using Content Security Policy

custom_exploits

A collection of custom built scripts to exploit known vulnerability chains

custom_vuln_scan_templates

A collection of custom built scan templates for automated vuln scanning (nuclei, Burp, etc.)

cvemap

Navigate the CVE jungle with ease.

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

diffscript

dmarc-subdomains

Tool to parse subdomains from dmarc.live

dmarcscan

Bulk Domain-based Message Authentication, Reporting and Conformance Scanner

domainlookout-release

This is a pre-release version of a Domain Monitoring tool built to allow companies to find newly registered domains that may be attackers trying to spoof your company