barondante

barondante's Stars

• KingOfBugbounty/KingOfBugBountyTips

  Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

  Language:Go4.2k793

• CompassSecurity/Hacking_Tools_Cheat_Sheet

  Language:Shell705108

• Arno0x/DNSExfiltrator

  Data exfiltration over DNS request covert channel

  Language:JavaScript841180

• onlurking/awesome-infosec

  A curated list of awesome infosec courses and training resources.

  5.1k735

• Hack-with-Github/Awesome-Hacking

  A collection of various awesome lists for hackers, pentesters and security researchers

  82.2k8.8k

• EdOverflow/bugbounty-cheatsheet

  A list of interesting payloads, tips and tricks for bug bounty hunters.

  5.8k1.5k

• enaqx/awesome-pentest

  A collection of awesome penetration testing resources, tools and other shiny things

  21.3k4.4k

• jivoi/awesome-osint

  :scream: A curated list of amazingly awesome OSINT

  18.1k2.7k

• lanmaster53/recon-ng

  Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

  Language:Python3.8k619

• tomnomnom/httprobe

  Take a list of domains and probe for working HTTP and HTTPS servers

  Language:Go2.8k495

• aboul3la/Sublist3r

  Fast subdomains enumeration tool for penetration testers

  Language:Python9.6k2.1k

• RedSiege/EyeWitness

  EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

  Language:Python4.9k837

• guelfoweb/knock

  Knock Subdomain Scan

  Language:Python3.8k852

• jhaddix/domain

  Setup script for Regon-ng

  Language:Python916240

• 1N3/IntruderPayloads

  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

  Language:BlitzBasic3.6k1.2k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP56.6k23.7k

• swisskyrepo/SSRFmap

  Automatic SSRF fuzzer and exploitation tool

  Language:Python2.9k507

• tomnomnom/assetfinder

  Find domains and subdomains related to a given domain

  Language:Go3k474