haggard88

haggard88's Stars

• toolswatch/blackhat-arsenal-tools

  Official Black Hat Arsenal Security Tools Repository

  3.8k1.1k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP56.6k23.7k

• NoorQureshi/public-pentesting-reports

  Curated list of public penetration test reports released by several consulting firms and academic security groups

  Language:C4

• NoorQureshi/kali-linux-cheatsheet

  Kali Linux Cheat Sheet for Penetration Testers

  1.9k329

• nahamsec/intrigue-core

  Intelligence gathering framework

  Language:Ruby124

• nahamsec/burpy

  Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.

  Language:Python3313

• nahamsec/JSParser

  Language:Python782179

• nahamsec/lazyrecon

  This script is intended to automate your reconnaissance process in an organized fashion

  Language:Shell1.9k568

• nahamsec/recondata

  use at your own risk

  356

• nahamsec/crtndstry

  Yet another subdomain finder

  Language:Shell19555

• nahamsec/bbht

  A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

  Language:Shell1.1k432

• nahamsec/recon_profile

  Language:Shell408225

• nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

  A list of resources for those interested in getting started in bug bounties

  10.5k1.9k

• JacobReynolds/robotViewer

  Chrome extension for clickable robots.txt links

  2

• NetSPI/BurpCollaboratorDNSTunnel

  A DNS tunnel utilizing the Burp Collaborator

  Language:Java9930

• jhaddix/NodeGoat

  The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.

  Language:JavaScript67

• jhaddix/mywebappscripts

  A collection of all the lists, scripts and techniques I use while doing web application penetration tests.

  Language:Python2424

• jhaddix/TTSL

  Tool to scrape LinkedIn

  Language:Python77

• jhaddix/brutesubs

  An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

  Language:Shell166

• jhaddix/LazyFuzzer

  Ease-of-use extension for Web Application penetration testing

  Language:JavaScript2111

• jhaddix/massdns

  A high-performance DNS stub resolver for bulk lookups

  Language:C2014

• jhaddix/bugcrowd-levelup-subdomain-enumeration

  This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bucrowd LevelUp 2017 virtual conference

  Language:Python2310

• jhaddix/JSParser

  Language:Python126

• jhaddix/samuraiwtf

  The main SamuraiWTF collaborative distro repo.

  Language:Shell63

• jhaddix/InputScanner

  Language:PHP1112

• jhaddix/JS-Scan

  a .js scanner, built in php. designed to scrape urls and other info

  Language:CSS1112

• jhaddix/bug-bounty-reference

  Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

  10775

• jhaddix/scripts

  Usefull stuff from around teh internetz

  Language:Python10956

• jhaddix/lazyrecon

  This script is intended to automate your reconnaissance process in an organized fashion

  Language:Shell3812

• jhaddix/can-i-take-over-xyz

  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

  3623