barondante's Stars
KingOfBugbounty/KingOfBugBountyTips
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
CompassSecurity/Hacking_Tools_Cheat_Sheet
Arno0x/DNSExfiltrator
Data exfiltration over DNS request covert channel
onlurking/awesome-infosec
A curated list of awesome infosec courses and training resources.
Hack-with-Github/Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
EdOverflow/bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
enaqx/awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
jivoi/awesome-osint
:scream: A curated list of amazingly awesome OSINT
lanmaster53/recon-ng
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
tomnomnom/httprobe
Take a list of domains and probe for working HTTP and HTTPS servers
aboul3la/Sublist3r
Fast subdomains enumeration tool for penetration testers
RedSiege/EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
guelfoweb/knock
Knock Subdomain Scan
jhaddix/domain
Setup script for Regon-ng
1N3/IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
swisskyrepo/SSRFmap
Automatic SSRF fuzzer and exploitation tool
tomnomnom/assetfinder
Find domains and subdomains related to a given domain