android

The FetLife App on Android

api_wordlist

A wordlist of API names for web application assessments

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-securitytelegram

Awesome list telegram groups

awesome-tunneling

List of ngrok alternatives and other ngrok-like tunneling software and services. Focus on self-hosting.

bchecks

BChecks collection for Burp Suite Professional

bchecks-templates

bchecks-templates

bugbountyreporttemplates

List of reporting templates I have used since I started doing BBH.

burp-bounty-profiles

burp-bounty-profiles

cfonts-rust

cgdi

Application to calculate duration between 2 dates (Electron app)

cheatsheets

Community-sourced cheatsheets

conti_v3

Password:ВсеБудеУкраїна

crlfsuite

Fast CRLF injection scanning tool

curlconverter

generate code from cURL commands

custom-nuclei-templates

Repositorio de templates custom de Nuclei

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2022-22972

cve-2022-2602

CVE-2022-2602

cve-2022-27925

Zimbra CVE-2022-27925 PoC

cve-2022-37042

Zimbra CVE-2022-37042 Nuclei weaponized template

cve-2022-42046

CVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM

cve-2023-24055

POC and Scanner for CVE-2023-24055

cve_monitor

Automatic monitor github cve using Github Actions

dbns

DBNS (DataBase Nuclei Scanner) is a tool that allows you to keep track of the scans that are done with Nuclei in a simple way by saving the results in a database.

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

dnsaudit

A command-line utility for auditing DNS configuration using Zonemaster API

freq

This is go CLI tool for send fast Multiple get HTTP request.

fscan

一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.