BillyNoGoat's Stars
n00b-bot/Elasticburp-NG
ElasticBurp-NG
arkadiyt/bounty-targets-data
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
projectdiscovery/proxify
A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.
sindresorhus/alfy
Create Alfred workflows with ease
ustayready/fireprox
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
mgreiler/secure-code-review-checklist
nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
jaeles-project/jaeles
The Swiss Army knife for automated Web Application Testing
doyensec/electronegativity
Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.
ffuf/ffuf
Fast web fuzzer written in Go
internetwache/GitTools
A repository with 3 tools for pwn'ing websites with .git repositories available
longjiang/zerotohero-cli
DitheringIdiot/qwitter-bot
A twitter bot that helps people quit twitter
craighays/bucketkicker
Brute force AWS bucket finder
hisxo/gitGraber
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
gquere/pwn_jenkins
Notes about attacking Jenkins servers
tomnomnom/gf
A wrapper around grep, to help you grep for things
TheHackerDev/race-the-web
Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.
psypanda/hashID
Software to identify the different types of hashes -
blackthorne/Codetective
a tool to determine the crypto/encoding algorithm used according to traces from its representation
DiogoMRSilva/websitesVulnerableToSSTI
Simple websites vulnerable to Server Side Template Injections(SSTI)
j3ssie/osmedeus
A Workflow Engine for Offensive Security
0xacb/viewgen
Viewgen is a ViewState tool capable of generating both signed and encrypted payloads with leaked validation keys
ZephrFish/DockerAttack
Various Tools and Docker Images
cujanovic/SSRF-Testing
SSRF (Server Side Request Forgery) testing resources
wetw0rk/AWAE-PREP
This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.
marin-m/pbtk
A toolset for reverse engineering and fuzzing Protobuf-based apps
streaak/keyhacks
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
sharkdp/fd
A simple, fast and user-friendly alternative to 'find'
asciimoo/exrex
Irregular methods on regular expressions