Stoinskii

Stoinskii's Stars

• yeswehack/pp-finder

  PP-finder Help you find gadget for prototype pollution exploitation

  Language:TypeScript12817

• kevin-mizu/domloggerpp

  A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

  Language:JavaScript39435

• GiJ03/API_KeyHacks

  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

  133

• irsdl/IIS-ShortName-Scanner

  latest version of scanners for IIS short filename (8.3) disclosure vulnerability

  Language:Java1.4k250

• s0md3v/Corsy

  CORS Misconfiguration Scanner

  Language:Python1.3k175

• mhmdiaa/waybackrobots

  Enumerate old versions of robots.txt paths using Wayback Machine for content discovery

  Language:Go373

• PortSwigger/auth-analyzer

  Language:Java729

• nikitastupin/clairvoyance

  Obtain GraphQL API schema even if the introspection is disabled

  Language:Python1k89

• payloadbox/sql-injection-payload-list

  🎯 SQL Injection Payload List

  4.8k1.2k

• KingOfBugbounty/KingOfBugBountyTips

  Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

  Language:Go4.2k798

• forcesunseen/graphquail

  Burp Suite extension that offers a toolkit for testing GraphQL endpoints.

  Language:Java18216

• doyensec/GQLSpection

  GQLSpection - parses GraphQL introspection schema and generates possible queries

  Language:Python667

• BishopFox/jsluice

  Extract URLs, paths, secrets, and other interesting bits from JavaScript

  Language:Go1.4k87

• GerbenJavado/LinkFinder

  A python script that finds endpoints in JavaScript files

  Language:Python3.6k590

• m4ll0k/SecretFinder

  SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

  Language:Python2k369

• projectdiscovery/subfinder

  Fast passive subdomain enumeration tool.

  Language:Go10k1.3k

• six2dez/reconftw

  reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

  Language:Shell5.6k910

• Viralmaniar/BigBountyRecon

  BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

  Language:C#1.2k238

• tomnomnom/qsreplace

  Accept URLs on stdin, replace all query string values with a user-supplied value

  Language:Go748123

• americo/sqlifinder

  SQL Injection Vulnerability Scanner made with Python

  Language:Python32969

• s0md3v/uro

  declutters url lists for crawling/pentesting

  Language:Python1.1k135

• phor3nsic/favicon_hash_shodan

  Calculate favicon hash for SHODAN

  Language:Python7114

• KathanP19/HowToHunt

  Collection of methodology and test case for various web vulnerabilities.

  6.1k1.7k

• 0xmaximus/Galaxy-Bugbounty-Checklist

  Tips and Tutorials for Bug Bounty and also Penetration Tests.

  1.4k340

• musana/fuzzuli

  fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

  Language:Go71872

• redhuntlabs/BucketLoot

  BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.

  Language:Go37152

• blacklanternsecurity/bbot

  A recursive internet scanner for hackers.

  Language:Python4.5k401

• Tib3rius/AutoRecon

  AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

  Language:Python5.1k869

• jhaddix/sus_params

  Language:Python252

• projectdiscovery/asnmap

  Go CLI and Library for quickly mapping organization network ranges using ASN information.

  Language:Go73465