lemosnlmb

lemosnlmb's Stars

• R0X4R/ssrf-tool

  An SSRF detector tool written in golang. I have fixed some errors and added some more payloads to it. But the tool credits go to z0idsec.

  Language:Go4311

• R0X4R/Garud

  An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

  Language:Shell777178

• MayankPandey01/Jira-Lens

  Fast and customizable vulnerability scanner For JIRA written in Python

  Language:Python31749

• riramar/Web-Attack-Cheat-Sheet

  Web Attack Cheat Sheet

  4.2k641

• infoslack/awesome-web-hacking

  A list of web application security

  5.8k1.2k

• paralax/lfi-labs

  small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

  Language:PHP31882

• tauh33dkhan/XSStrike-extension

  Language:Python4

• 0xCGonzalo/Golden-Guide-for-Pentesting

  Golden Guide

  Language:Python472118

• devanshbatham/ParamSpider

  Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

  Language:Python2.5k425

• imran-parray/Mind-Maps

  Mind-Maps of Several Things

  2.4k519

• Tanmay-N/CORS-Scanner

  Language:Go3213

• hueristiq/xurlfind3r

  A command-line utility designed to help you discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

  Language:Go56165

• pikpikcu/XRCross

  XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

  Language:Shell32971

• MindPatch/lorsrf

  Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

  Language:Rust28843

• m4ll0k/SecretFinder

  SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

  Language:Python2k375

• defparam/smuggler

  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

  Language:Python1.8k295

• ehsaanqazi/Bug-Bounty

  Resources and Guides for Web Application Vulnerabilities

  144

• ghsec/webHunt

  Web App bug hunting

  553145

• jaeles-project/jaeles

  The Swiss Army knife for automated Web Application Testing

  Language:Go2.2k318

• codingo/NoSQLMap

  Automated NoSQL database enumeration and web application exploitation tool.

  Language:Python2.9k580

• nahamsec/lazyrecon

  This script is intended to automate your reconnaissance process in an organized fashion

  Language:Shell1.9k573

• almandin/fuxploider

  File upload vulnerability scanner and exploitation tool.

  Language:Python3k496

• streaak/keyhacks

  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

  5.1k1k

• machine1337/recon-automation

  This script will install all the essential bug bounty tools and will find some basic vulns. I made this script for my daily hunting. The best feature about this script is just run it in background and then analyze the target manually.

  Language:Shell3813

• machine1337/FUD_keylogger

  Fully FUD keylogger that can bypass windows 11 & windows 10 defender protection and all kinds of Antivirus protections also.

  168

• zigoo0/webpwn3r

  WebPwn3r - Web Applications Security Scanner.

  Language:Python453159

• disclose/diodb

  Open-source vulnerability disclosure and bug bounty program database

  Language:Python984319

• arthaud/git-dumper

  A tool to dump a git repository from a website

  Language:Python1.9k251

• kleiton0x00/ppmap

  A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

  Language:Go49372

• assetnote/kiterunner

  Contextual Content Discovery Tool

  Language:Go2.6k295