colinrubbert

colinrubbert's Stars

• AntonOsika/gpt-engineer

  Platform to experiment with the AI Software Engineer. Terminal based. NOTE: Very different from https://gptengineer.app

  Language:Python52.8k5184856.9k

• oobabooga/text-generation-webui

  A Gradio web UI for Large Language Models with support for multiple inference backends.

  Language:Python41.5k3293.7k5.4k

• MobSF/Mobile-Security-Framework-MobSF

  Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

  Language:JavaScript17.8k5781.5k3.3k

• wader/fq

  jq for binary formats - tool, language and decoders for working with binary and text formats

  Language:Go9.8k5074227

• six2dez/reconftw

  reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

  Language:Shell5.9k109457941

• streaak/keyhacks

  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

  5.2k108631.1k

• EdOverflow/can-i-take-over-xyz

  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

  Language:Python4.9k126246723

• tomnomnom/gf

  A wrapper around grep, to help you grep for things

  Language:Go1.8k2645324

• edoardottt/cariddi

  Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

  Language:Go1.6k1564162

• tomnomnom/anew

  A tool for adding new lines to files, skipping duplicates

  Language:Go1.4k2318161

• hakluke/weaponised-XSS-payloads

  XSS payloads designed to turn alert(1) into P1

  Language:JavaScript1.3k463217

• 1ndianl33t/Gf-Patterns

  GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

  1.2k2811281

• caido/caido

  🚀 Caido releases, wiki and roadmap

  1.2k191.4k57

• securing/DumpsterDiver

  Tool to search secrets in various filetypes.

  Language:Python9813113153

• ozguralp/gmapsapiscanner

  Language:Python9442414179

• bitquark/shortscan

  An IIS short filename enumeration tool

  Language:Go84171882

• tomnomnom/qsreplace

  Accept URLs on stdin, replace all query string values with a user-supplied value

  Language:Go7762011126

• 003random/getJS

  A tool to fastly get all javascript sources/files

  Language:Go7371310105

• assetnote/surf

  Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

  Language:Go6118144

• AggressiveUser/AllForOne

  AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,

  Language:Python56911484

• s0md3v/SubGPT

  Find subdomains with GPT, for free

  Language:Python3364247

• Ignitetechnologies/Android-Penetration-Testing

  33020070

• ferreiraklet/airixss

  Finding XSS during recon

  Language:Go2537743

• sansatart/scrapts

  Scrapts Scrapts Scrapts

  Language:Shell23511101

• hakluke/bug-bounty-standards

  A list of edge cases that occur in bug bounty programs, conversations on how they should be handled. The goal is to standardise the way that specific situations are handled in bug bounties.

  22991010

• jhaddix/awsScrape

  A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

  Language:Go2286129

• nccgroup/cq

  Language:Python1158110

• St74nger/writeup-miner

  This is a useful Python script for extracting bug bounty or any other write-ups from Medium.com and other websites (soon).

  Language:Python435

• jthack/metaprompter

  Language:Python21202

• Nexus0821/Harmonica

  RecNet clone server made for cheating. (patched)

  Language:C#12