hackerpain's Stars
ionic-team/ionicons
Premium hand-crafted icons built by Ionic, for Ionic apps and web apps everywhere 🌎
vulhub/vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
MobSF/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
nomi-sec/PoC-in-GitHub
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
dwisiswant0/apkleaks
Scanning APK file for URIs, endpoints & secrets.
streaak/keyhacks
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
pry0cc/axiom
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
lobuhi/byp4xx
40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...
hakluke/weaponised-XSS-payloads
XSS payloads designed to turn alert(1) into P1
j3ssie/metabigor
OSINT tools and more but without API key
tyranid/oleviewdotnet
A .net OLE/COM viewer and inspector to merge functionality of OleView and Test Container
ayoubfathi/leaky-paths
A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.
AlephNullSK/dnsgen
Generates combination of domain names from the provided input.
mfbx9da4/deep-email-validator
Validates regex, typos, disposable, dns and smtp
awslabs/aws-js-s3-explorer
AWS JavaScript S3 Explorer is a JavaScript application that uses AWS's JavaScript SDK and S3 APIs to make the contents of an S3 bucket easy to browse via a web browser.
minimaxir/gpt-3-experiments
Test prompts for OpenAI's GPT-3 API and the resulting AI-generated texts.
gwen001/github-subdomains
Find subdomains on GitHub.
abhi-r3v0/Adhrit
Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.
deepseagirl/degoogle
search Google and extract results directly. skip all the click-through links and other sketchiness
ant4g0nist/Vulnerable-Kext
A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation
gomodules/notify
Send notification via Email, SMS, Chat etc.
Mad-robot/Spartan
My Recon Automation
2bdenny/ReScue
An automated tool for the detection of regexes' slow-matching vulnerabilities.
bytebutcher/burp-send-to
Adds a customizable "Send to..."-context-menu to your BurpSuite.
BugBountyResources/targets
A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.
Mad-robot/wordpress-exploits
All known and unknown public POC's for wordpress themes and plugins
0xsapra/fuzzparam
savebreach/hakrevdns
Small, fast tool for performing reverse DNS lookups en masse.
savebreach/programming
Collection of courses, interesting snippets and learning resources for learning programming
savebreach/sshuttle
Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.