Sechunt3r

Sechunt3r's Stars

• duckduckgo/tracker-radar

  Data set of top third party web domains with rich metadata about them

  Language:JavaScript1.5k206

• TalEliyahu/awesome-cybersecurity-conferences

  Watch the latest awesome security talks around the globe

  26729

• qazbnm456/awesome-web-security

  🐶 A curated list of Web Security materials and resources.

  11.6k1.7k

• glitchedgitz/cook

  A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

  Language:Go1.1k115

• n0kovo/n0kovo_subdomains

  An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

  57179

• mandatoryprogrammer/xcname

  A tool for enumerating expired domains in CNAME records

  Language:Python5916

• trimstray/sandmap

  Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.

  Language:Shell1.6k218

• nikitastupin/orgs-data

  Mapping from bug bounty and vulnerability disclosure programs to respective GitHub organizations

  Language:Shell5411

• punk-security/dnsReaper

  dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

  Language:Python2k170

• Qianlitp/crawlergo

  A powerful browser crawler for web vulnerability scanners

  Language:Go2.9k483

• projectdiscovery/uncover

  Quickly discover exposed hosts on the internet using multiple search engines.

  Language:Go2.5k209

• edoardottt/awesome-hacker-search-engines

  A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

  Language:Shell8.1k771

• vavkamil/awesome-bugbounty-tools

  A curated list of various bug bounty tools

  4.4k715

• valeriyshevchenko90/WhereToGo

  WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find entry points to the organization data.

  11810

• musana/mx-takeover

  mx-takeover focuses DNS MX records and detects misconfigured MX records.

  Language:Go34343

• BishopFox/jsluice

  Extract URLs, paths, secrets, and other interesting bits from JavaScript

  Language:Go1.5k100

• Nekmo/dirhunt

  Find web directories without bruteforce

  Language:Python1.8k255

• UnaPibaGeek/ctfr

  Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

  Language:Python2k292

• edermi/skweez

  Fast website scraper and wordlist generator

  Language:Go755

• Sh1Yo/x8

  Hidden parameters discovery suite

  Language:Rust1.7k157

• ImAyrix/fallparams

  Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

  Language:Go24733

• glebarez/cero

  Scrape domain names from SSL certificates of arbitrary hosts

  Language:Go62883

• ethicalhackingplayground/bxss

  Blind XSS Scanner is a tool that can be used to scan for blind XSS vulnerabilities in web applications.

  Language:Go24449

• Invicti-Security/brainstorm

  A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery

  Language:Python16115

• v1dhun/subfinder-action

  Finding subdomain using subfinder

  7

• rmkanda/tools

  Curated list of security tools

  6316

• TalEliyahu/awesome-security-newsletters

  Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

  1k74

• semihalev/sdns

  A high-performance, recursive DNS resolver server with DNSSEC support, focused on preserving privacy.

  Language:Go96758

• apify/crawlee

  Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, and other files from websites. Works with Puppeteer, Playwright, Cheerio, JSDOM, and raw HTTP. Both headful and headless mode. With proxy rotation.

  Language:TypeScript16.4k721

• snwfdhmp/awesome-gpt-prompt-engineering

  A curated list of awesome resources, tools, and other shiny things for LLM prompt engineering.

  Language:Python1.1k117