haggard88's Stars
toolswatch/blackhat-arsenal-tools
Official Black Hat Arsenal Security Tools Repository
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
NoorQureshi/public-pentesting-reports
Curated list of public penetration test reports released by several consulting firms and academic security groups
NoorQureshi/kali-linux-cheatsheet
Kali Linux Cheat Sheet for Penetration Testers
nahamsec/intrigue-core
Intelligence gathering framework
nahamsec/burpy
Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the module provided and finally generate a HTML report.
nahamsec/JSParser
nahamsec/lazyrecon
This script is intended to automate your reconnaissance process in an organized fashion
nahamsec/recondata
use at your own risk
nahamsec/crtndstry
Yet another subdomain finder
nahamsec/bbht
A script to set up a quick Ubuntu 17.10 x64 box with tools I use.
nahamsec/recon_profile
nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
JacobReynolds/robotViewer
Chrome extension for clickable robots.txt links
NetSPI/BurpCollaboratorDNSTunnel
A DNS tunnel utilizing the Burp Collaborator
jhaddix/NodeGoat
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
jhaddix/mywebappscripts
A collection of all the lists, scripts and techniques I use while doing web application penetration tests.
jhaddix/TTSL
Tool to scrape LinkedIn
jhaddix/brutesubs
An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose
jhaddix/LazyFuzzer
Ease-of-use extension for Web Application penetration testing
jhaddix/massdns
A high-performance DNS stub resolver for bulk lookups
jhaddix/bugcrowd-levelup-subdomain-enumeration
This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bucrowd LevelUp 2017 virtual conference
jhaddix/JSParser
jhaddix/samuraiwtf
The main SamuraiWTF collaborative distro repo.
jhaddix/InputScanner
jhaddix/JS-Scan
a .js scanner, built in php. designed to scrape urls and other info
jhaddix/bug-bounty-reference
Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
jhaddix/scripts
Usefull stuff from around teh internetz
jhaddix/lazyrecon
This script is intended to automate your reconnaissance process in an organized fashion
jhaddix/can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.