St0rm-85

St0rm-85's Stars

• defparam/smuggler

  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

  Language:Python1.8k294

• j3ssie/metabigor

  OSINT tools and more but without API key

  Language:Go1.2k168

• richiemann/vietnam-password-lists

  Lists of most common passwords in Vietnam

  6568

• bitsadmin/wesng

  Windows Exploit Suggester - Next Generation

  Language:Python4.2k568

• AonCyberLabs/Windows-Exploit-Suggester

  This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins.

  Language:Python4k1k

• rust-lang/rust

  Empowering everyone to build reliable and efficient software.

  Language:Rust98.1k12.7k

• tomnomnom/assetfinder

  Find domains and subdomains related to a given domain

  Language:Go3k483

• robertdavidgraham/masscan

  TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

  Language:C23.6k3.1k

• sherlock-project/sherlock

  Hunt down social media accounts by username across social networks

  Language:Python59.9k6.9k

• tsug0d/MyAwesomeWebChallenge

  Collection of my capture-the-flag web challenge in any levels

  Language:PHP10728

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61.1k14.6k

• six2dez/reconftw

  reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

  Language:Shell5.7k922

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go12.6k1.3k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP58.2k23.9k

• s0md3v/Arjun

  HTTP parameter discovery suite.

  Language:Python5.2k792

• tanprathan/MobileApp-Pentest-Cheatsheet

  The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

  4.6k1.2k

• michenriksen/aquatone

  A Tool for Domain Flyovers

  Language:Go5.6k876

• ine-labs/AWSGoat

  AWSGoat : A Damn Vulnerable AWS Infrastructure

  Language:PHP1.7k1.1k

• tsug0d/LearnJavaVulnerability

  Things help you get started with Java Vulnerability

  Language:Java6810

• kubernetes/kubernetes

  Production-Grade Container Scheduling and Management

  Language:Go111k39.6k

• qazbnm456/awesome-web-security

  🐶 A curated list of Web Security materials and resources.

  11.4k1.7k

• lc/gau

  Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

  Language:Go4k447

• owasp-modsecurity/ModSecurity

  ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

  Language:C++8.2k1.6k

• ArjunSharda/Searchor

  ⚡️ Quick and easy searching tasks in one library.

  Language:Python8134

• rverton/webanalyze

  Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

  Language:Go973139

• tomnomnom/gf

  A wrapper around grep, to help you grep for things

  Language:Go1.8k317

• hungdont85/golangPractice

  Language:Go21

• St0rm-85/security-on-github

  Language:JavaScript1

• jwasham/coding-interview-university

  A complete computer science study plan to become a software engineer.

  306k76.8k

• public-apis/public-apis

  A collective list of free APIs

  Language:Python316k33.7k