kianoosh21

kianoosh21's Stars

• cure53/DOMPurify

  DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

  Language:JavaScript14.3k749

• shubhamrooter/ShodanSpider

  ShodanSpider is an open-source tool for interacting with Shodan. It lets you search and extract data from Shodan without an API key, offering a simple command-line interface. Premium users can integrate their API key for more results. Ideal for penetration testers and cybersecurity researchers.

  Language:Shell10817

• iamunixtz/JSNinja

  JSNinja is a powerful tool designed for security researchers and developers looking to extract sensitive information and Urls from JavaScript files.

  Language:Python11421

• tomnomnom/unfurl

  Pull out bits of URLs provided on stdin

  Language:Go1.1k124

• faiyazahmad07/xss_vibes

  A modern tool written in Python that automates your xss findings.

  Language:Python38771

• kazet/wpgarlic

  A proof-of-concept WordPress plugin fuzzer

  Language:Python18519

• spyboy-productions/CloakQuest3r

  Uncover the true IP address of websites safeguarded by Cloudflare & Others

  Language:Python1.4k191

• blackhatethicalhacking/SQLMutant

  SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. It filters URLs to identify those with parameters susceptible to SQL injection formats and then performs injection attacks. These attacks include pattern matching, error analysis, and timing attacks.

  Language:Shell13132

• sqlmapproject/sqlmap

  Automatic SQL injection and database takeover tool

  Language:Python33k5.8k

• bnematzadeh/LoggerPlusPlus-API-Filters

  A comprehensive list of custom filters for Logger++ to identify various vulnerabilities in different API styles

  21435

• trufflesecurity/trufflehog

  Find, verify, and analyze leaked credentials

  Language:Go17.7k1.7k

• blackhatethicalhacking/TerminatorZ

  TerminatorZ is a highly sophisticated and efficient web security tool that scans for top potential vulnerabilities with known CVEs in your web applications.

  Language:Shell27138

• gmelodie/awesome-wordlists

  A curated list wordlists for bruteforcing and fuzzing

  823147

• coffinxp/loxs

  best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect

  Language:Python830187

• linuxadi/40k-nuclei-templates

  40,000+ Nuclei templates for security scanning and detection across diverse web applications and services

  29059

• emadshanab/Nuclei-Templates-Collection

  Nuclei Templates Collection

  Language:Python932246

• devanshbatham/ParamSpider

  Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

  Language:Python2.6k431

• 0xKayala/NucleiFuzzer

  NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

  Language:Shell1.3k203

• pwnwriter/haylxon

  ⚡ Blazing-fast tool to grab screenshots of your domain list right from terminal.

  Language:Rust40219

• s0md3v/Arjun

  HTTP parameter discovery suite.

  Language:Python5.4k803

• xnl-h4ck3r/waymore

  Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

  Language:Python1.8k206

• GerbenJavado/LinkFinder

  A python script that finds endpoints in JavaScript files

  Language:Python3.8k608

• tomnomnom/gf

  A wrapper around grep, to help you grep for things

  Language:Go1.8k324

• 1ndianl33t/Gf-Patterns

  GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

  1.2k281

• Sh1Yo/x8

  Hidden parameters discovery suite

  Language:Rust1.7k157

• mandatoryprogrammer/xsshunter-express

  An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

  Language:JavaScript1.7k331

• iamunixtz/LazyXss

  Automation tool to testing and confirm the xss vulnerability.

  Language:Python13828

• s0md3v/XSStrike

  Most advanced XSS scanner.

  Language:Python13.5k1.9k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP59.9k24k

• XuVix/Monitoring_Bot

  a Simple Bot to Monitoring Server

  Language:Shell355