massito Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

971-mb-content_discovery_wordlist

Collection of content discovery wordlists in one wordlist.

airixss

Finding XSS during recon

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

amass

In-depth Attack Surface Mapping and Asset Discovery

apt2

automated penetration toolkit

archerysec

Open Source Vulnerability Assessment and Management helps developers and pentesters to perform scans and manage vulnerabilities.

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-python

A curated list of awesome Python frameworks, libraries, software and resources

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

awesome-web-hacking

A list of web application security

awesomexss

Awesome XSS stuff

aws_public_ips

Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services

b-xssrf

Toolkit to detect and keep track on Blind XSS, XXE & SSRF

bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

bounty-domains

List of domains in scope for bug bounties (HackerOne, Bugcrowd, etc.)

bountyplz

Automated security reporting from markdown templates (HackerOne is currently the platform supported)

bountytricks

broken-link-checker

Find broken links, missing images, etc in your HTML.

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bughunter

Tools for Bug Hunting

burp-co2

A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

burpmetafinder

Burp Suite extension for extracting metadata from files

burpsuite-plugins-extensions-arsenal

burpsuitehttpsmuggler

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques