XXCyberWarrior

XXCyberWarrior's Stars

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP61.6k1.9k27824.2k

• projectdiscovery/nuclei

  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

  Language:Go22.7k2472.5k2.6k

• smicallef/spiderfoot

  SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

  Language:Python14k3736152.4k

• sundowndev/hacker-roadmap

  A collection of hacking tools, resources and references to practice ethical hacking.

  13.9k503191.6k

• maurosoria/dirsearch

  Web path scanner

  Language:Python12.7k3085622.4k

• chaitin/xray

  一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

  Language:Vue10.7k2074761.8k

• sullo/nikto

  Nikto web server scanner

  Language:Perl9.1k2864681.3k

• projectdiscovery/httpx

  httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

  Language:Go8.3k79664882

• vavkamil/awesome-bugbounty-tools

  A curated list of various bug bounty tools

  4.8k10418764

• andresriancho/w3af

  w3af: web application attack and audit framework, the open source web vulnerability scanner.

  Language:Python4.7k19318.7k1.2k

• Arachni/arachni

  Web Application Security Scanner Framework

  Language:Ruby3.9k2051k768

• tomnomnom/assetfinder

  Find domains and subdomains related to a given domain

  Language:Go3.2k4640505

• almandin/fuxploider

  File upload vulnerability scanner and exploitation tool.

  Language:Python3.2k690509

• archerysec/archerysec

  ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.

  Language:JavaScript2.3k94264510

• Ignitetechnologies/BurpSuite-For-Pentester

  This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

  2.3k766476

• Dewalt-arch/pimpmykali

  Kali Linux Fixes for Newly Imported VM's

  Language:Shell2.2k670372

• haccer/subjack

  Subdomain Takeover tool written in Go

  Language:Go2k4863345

• bittentech/Bug-Bounty-Beginner-Roadmap

  This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

  1.9k417241

• onhexgroup/Conferences

  Conference presentation slides

  1.7k623278

• six2dez/pentest-book

  1.7k540587

• Lucifer1993/struts-scan

  Python2编写的struts2漏洞全版本检测和利用工具

  Language:Python1.4k5917507

• wapiti-scanner/wapiti

  Web vulnerability scanner written in Python3

  Language:Python1.3k27205207

• Viralmaniar/BigBountyRecon

  BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

  Language:C#1.3k379260

• 4ra1n/super-xray

  Web漏洞扫描工具XRAY的GUI启动器

  Language:Java1.3k18158148

• Jieyab89/OSINT-Cheat-sheet

  OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT and OSINT tips. This repository will grow every time will research, there is a research, science and technology, use it wisely.

  918338137

• redtoolskobe/scaninfo

  fast scan for redtools

  Language:Go861119113

• enkomio/Taipan

  Web application vulnerability scanner

  466251193

• kracer127/SiteScan

  专注一站化解决渗透测试的信息收集任务，功能包括域名ip历史解析、nmap常见端口爆破、子域名信息收集、旁站信息收集、whois信息收集、网站架构分析、cms解析、备案信息收集、CDN信息解析、是否存在waf检测、后台寻找以及生成检测结果html报告表。

  Language:Python4235974

• fleetcaptain/Turbolist3r

  Subdomain enumeration tool with analysis features for discovered domains

  Language:Python37919080

• Mr-Cyb3rgh0st/Hacking-Resources

  Cyber-Security-Resources

  11402