009falcon

009falcon's Stars

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go12.4k1565181.3k

• yogeshojha/rengine

  reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

  Language:HTML7.4k1418511.1k

• 0xInfection/Awesome-WAF

  🔥 Web-application firewalls (WAFs) from security standpoint.

  Language:Python6.2k26061.1k

• S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet

  A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

  5.5k114101.2k

• streaak/keyhacks

  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

  4.9k106631k

• KingOfBugbounty/KingOfBugBountyTips

  Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

  Language:Go4.2k23311804

• lc/gau

  Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

  Language:Go3.9k50100439

• dwisiswant0/awesome-oneliner-bugbounty

  A collection of awesome one-liner scripts especially for bug bounty tips.

  2.6k7718572

• imran-parray/Mind-Maps

  Mind-Maps of Several Things

  2.4k721516

• m4ll0k/BBTz

  BBT - Bug Bounty Tools (examples💡)

  Language:Python1.7k619470

• harsh-bothra/learn365

  This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

  1.6k1133391

• tomnomnom/unfurl

  Pull out bits of URLs provided on stdin

  Language:Go1.1k1714117

• The-XSS-Rat/SecurityTesting

  Language:Python1k474265

• rodolfomarianocy/OSCP-Tricks-2023

  OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines

  918240198

• initstring/dirty_sock

  Linux privilege escalation exploit via snapd (CVE-2019-7304)

  Language:Python662186149

• arkadiyt/bounty-targets

  This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

  Language:Ruby6062128104

• doyensec/awesome-electronjs-hacking

  A curated list of awesome resources about Electron.js (in)security

  57117060

• hakluke/haktrails

  Golang client for querying SecurityTrails API data

  Language:Go531101257

• dhaval17/awsome-security-write-ups-and-POCs

  Awesome Writeups and POCs

  504211120

• deepseagirl/degoogle

  search Google and extract results directly. skip all the click-through links and other sketchiness

  Language:Python491174118

• punishell/bbtips

  BugBountyTips

  Language:JavaScript40017382

• w9w/JSA

  Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

  Language:Python3855867

• geeknik/the-nuclei-templates

  Nuclei templates written by us.

  26313363

• bugcrowd/tipjar

  20223147

• rotemreiss/uddup

  Urls de-duplication tool for better recon.

  Language:Python1366620

• alessio-romano/Sfoffo-Pentesting-Notes

  All knowledge I gained from CTFs, real life penetration testing and learning by myself.

  1063018

• zeroc00I/ReconNotes

  Just some public notes that can be useful and i want let the world knows.

  867041

• udit-thakkur/AdvancedKeyHacks

  API Key/Token Exploitation Made easy.

  Language:Shell855129

• fanicia/security-notes

  Markdown repo for notes on all things redteaming

  Language:Python422010

• k3nundrum/CRTP

  Notes for CRTP

  392019