n0lsecurity

n0lsecurity's Stars

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python61.1k1.8k014.6k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP58.2k1.9k26723.9k

• inancgumus/learngo

  ❤️ 1000+ Hand-Crafted Go Examples, Exercises, and Quizzes. 🚀 Learn Go by fixing 1000+ tiny programs.

  Language:Go18.9k315362.6k

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go12.6k1585201.3k

• owasp-amass/amass

  In-depth attack surface mapping and asset discovery

  Language:Go12k2146511.9k

• EdOverflow/can-i-take-over-xyz

  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

  Language:Python4.8k128239715

• lc/gau

  Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

  Language:Go4k49102447

• m0bilesecurity/RMS-Runtime-Mobile-Security

  Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

  Language:JavaScript2.6k6591375

• cujanovic/SSRF-Testing

  SSRF (Server Side Request Forgery) testing resources

  Language:Python2.3k731480

• hisxo/gitGraber

  gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

  Language:Python2k4226330

• defparam/smuggler

  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

  Language:Python1.8k3217294

• tomnomnom/gf

  A wrapper around grep, to help you grep for things

  Language:Go1.8k2544317

• Sh1Yo/x8

  Hidden parameters discovery suite

  Language:Rust1.7k2453152

• irsdl/IIS-ShortName-Scanner

  latest version of scanners for IIS short filename (8.3) disclosure vulnerability

  Language:Java1.4k3031255

• tomnomnom/anew

  A tool for adding new lines to files, skipping duplicates

  Language:Go1.4k2218153

• 1ndianl33t/Gf-Patterns

  GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

  1.2k2811278

• tillson/git-hound

  Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.

  Language:Go1.2k2247185

• httpvoid/writeups

  1.2k793174

• kaiiyer/awesome-vulnerable

  A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

  962127155

• DissectMalware/XLMMacroDeobfuscator

  Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

  Language:Python5712361115

• righettod/poc-graphql

  Research on GraphQL from an AppSec point of view.

  Language:Java40716161

• l4yton/RegHex

  A collection of regexes for every possbile use

  Language:Shell39615068

• craig/SpringCore0day

  SpringCore0day from https://share.vx-underground.org/ & some additional links

  Language:Python393111189

• barrracud4/image-upload-exploits

  This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests and bug bounty.

  Language:PostScript3208078

• dn0m1n8tor/learn365

  This repository is about @AnubhavSingh_'s 365 days of Learning Tweets collection.

  23017038

• neex/ghostinthepdf

  Language:Go1597124

• markpash/flowlat

  flowlat is an eBPF-based tool for monitoring TCP SYN/SYN-ACK latency.

  Language:Go38308

• m4ll0k/bbscope

  Scope gathering tool for HackerOne, Bugcrowd, Intigriti and Immunefi!

  Language:Go8102

• appknox/vapi

  a vulnerable web api

  Language:Python5303

• n0lsecurity/Brut

  Simple Bash DictionaryAttack Tool

  Language:Shell1100