richeeta

richeeta's Stars

• xalgord/Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes

  A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

  1.3k204

• m3n0sd0n4ld/GooFuzz

  GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).

  Language:Shell1.3k136

• gwen001/github-search

  A collection of tools to perform searches on GitHub.

  Language:Python1.3k340

• Cyber-Guy1/API-SecurityEmpire

  API Security Project aims to present unique attack & defense methods in API Security field

  1.4k245

• trickest/wordlists

  Real-world infosec wordlists, updated regularly

  1.4k170

• jordanpotti/AWSBucketDump

  Security Tool to Look For Interesting Files in S3 Buckets

  Language:Python1.4k240

• B3nac/Android-Reports-and-Resources

  A big list of Android Hackerone disclosed reports and other resources.

  1.5k303

• 1N3/BlackWidow

  A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

  Language:Python1.5k350

• doyensec/inql

  InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

  Language:Python1.5k158

• 1N3/Findsploit

  Find exploits in local and online databases instantly

  Language:Shell1.6k324

• wagiro/BurpBounty

  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

  Language:Java1.7k339

• d3mondev/puredns

  Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

  Language:Go1.7k160

• HolyBugx/HolyTips

  A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

  1.8k304

• p0dalirius/Awesome-RCE-techniques

  Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

  Language:Dockerfile1.8k217

• 1N3/BruteX

  Automatically brute force all services running on a target.

  Language:Shell2k594

• screetsec/Sudomy

  Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

  Language:Shell2k381

• hisxo/gitGraber

  gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

  Language:Python2k332

• jaeles-project/jaeles

  The Swiss Army knife for automated Web Application Testing

  Language:Go2.2k318

• Az0x7/vulnerability-Checklist

  This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

  2.6k593

• projectdiscovery/uncover

  Quickly discover exposed hosts on the internet using multiple search engines.

  Language:Go2.4k203

• antonio-morales/Fuzzing101

  An step by step fuzzing tutorial. A GitHub Security Lab initiative

  3.2k340

• devanshbatham/ParamSpider

  Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

  Language:Python2.5k426

• sa7mon/S3Scanner

  Scan for misconfigured S3 buckets across S3-compatible APIs!

  Language:Go2.6k366

• jaeles-project/gospider

  Gospider - Fast web spider written in Go

  Language:Go2.6k309

• six2dez/OneListForAll

  Rockyou for web fuzzing

  Language:Shell2.6k470

• dwisiswant0/awesome-oneliner-bugbounty

  A collection of awesome one-liner scripts especially for bug bounty tips.

  2.7k578

• opsdisk/pagodo

  pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

  Language:Python2.8k495

• jonaslejon/malicious-pdf

  💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

  Language:Python2.9k382

• codingo/NoSQLMap

  Automated NoSQL database enumeration and web application exploitation tool.

  Language:Python2.9k580

• vaib25vicky/awesome-mobile-security

  An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

  3k346