B0YK4

B0YK4's Stars

• nowak0x01/WPXStrike

  WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals vulnerabilities in WordPress

  Language:JavaScript609

• jaeles-project/jaeles

  The Swiss Army knife for automated Web Application Testing

  Language:Go2.2k318

• LewisArdern/metasecjs

  MetaSec.js combines all the free open-source security tools to identify issues with JavaScript and automates the boring parts

  Language:JavaScript778

• xnl-h4ck3r/GAP-Burp-Extension

  Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

  Language:Python1.2k132

• irsdl/IIS-ShortName-Scanner

  latest version of scanners for IIS short filename (8.3) disclosure vulnerability

  Language:Java1.4k255

• xm1k3/cent

  Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

  Language:Go868147

• OWASP/IoTGoat

  IoTGoat is a deliberately insecure firmware created to educate software developers and security professionals with testing commonly found vulnerabilities in IoT devices.

  Language:C693128

• streaak/keyhacks

  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

  5k1k

• redcanaryco/atomic-red-team

  Small and highly portable detection tests based on MITRE's ATT&CK.

  Language:C9.7k2.8k

• Syslifters/sysreptor

  Fully customisable, offensive security reporting solution designed for pentesters, red teamers and other security-related people alike.

  Language:Python1.5k136

• dnSpyEx/dnSpy

  Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

  Language:C#6.9k454

• hasherezade/pe_unmapper

  Small tool to convert beteween the PE alignments (raw and virtual).

  Language:C++8011

• outflanknl/EvilClippy

  A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

  Language:C#2.1k395

• arkadiyt/bounty-targets-data

  This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

  3.1k588

• ozguralp/gmapsapiscanner

  Language:Python922176

• DidierStevens/DidierStevensSuite

  Please no pull requests for this repository. Thanks!

  Language:Python2k525

• alexandreborges/malwoverview

  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.

  Language:Python3k446

• therealdreg/DbgChild

  Debug Child Process Tool (auto attach)

  Language:C26936

• a1ext/labeless

  Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping and interactive Python scripting capabilities.

  Language:C51482

• byt3bl33d3r/WitnessMe

  Web Inventory tool, takes screenshots of webpages using Pyppeteer (headless Chrome/Chromium) and provides some extra bells & whistles to make life easier.

  Language:Python730109

• blacklanternsecurity/bbot

  A recursive internet scanner for hackers.

  Language:Python4.7k422

• s0md3v/SubGPT

  Find subdomains with GPT, for free

  Language:Python33246

• jhaddix/SubreconGPT

  Language:Python10119

• honoki/bbrf-client

  The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

  Language:Python61290

• Dheerajmadhukar/karma_v2

  ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)

  Language:Shell811158

• projectdiscovery/nuclei

  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

  Language:Go20.5k2.5k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP58.2k23.9k

• 3xpl01tc0d3r/ProcessInjection

  This program is designed to demonstrate various process injection techniques

  Language:C#1.1k182

• google/timesketch

  Collaborative forensic timeline analysis

  Language:Python2.6k590

• log2timeline/plaso

  Super timeline all the things

  Language:Python1.7k347