sandrogarcia

sandrogarcia's Stars

• Genymobile/scrcpy

  Display and control your Android device

  Language:C120k1.3k5.3k11.3k

• swisskyrepo/PayloadsAllTheThings

  A list of useful payloads and bypass for Web Application Security and Pentest/CTF

  Language:Python64.4k1.9k015.2k

• danielmiessler/SecLists

  SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

  Language:PHP61.8k1.9k27824.2k

• The-Art-of-Hacking/h4cker

  This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.

  Language:Jupyter Notebook20.5k9501073.8k

• projectdiscovery/subfinder

  Fast passive subdomain enumeration tool.

  Language:Go11.4k1584771.3k

• 1N3/Sn1per

  Attack Surface Management Platform

  Language:Shell8.6k3303381.9k

• projectdiscovery/httpx

  httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

  Language:Go8.3k80669886

• OWASP/wstg

  The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

  Language:Dockerfile7.8k3523551.4k

• payloadbox/xss-payload-list

  🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

  6.9k140131.8k

• urbanadventurer/WhatWeb

  Next generation web scanner

  Language:Ruby5.8k176216929

• streaak/keyhacks

  Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

  5.4k107631.1k

• EdOverflow/can-i-take-over-xyz

  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

  Language:Python5.1k121250743

• hakluke/hakrawler

  Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

  Language:Go4.6k62105515

• eth0izzle/shhgit

  Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

  Language:JavaScript3.9k6165481

• tomnomnom/waybackurls

  Fetch all the URLs that the Wayback Machine knows about for a domain

  Language:Go3.8k6744497

• sa7mon/S3Scanner

  Scan for misconfigured S3 buckets across S3-compatible APIs!

  Language:Go2.7k65145383

• obheda12/GitDorker

  A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

  Language:Python2.4k6738427

• projectdiscovery/dnsx

  dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

  Language:Go2.3k35126251

• jaeles-project/jaeles

  The Swiss Army knife for automated Web Application Testing

  Language:Go2.2k7951323

• BankSecurity/Red_Team

  Some scripts useful for red team activities

  Language:PowerShell1.6k910364

• randorisec/MobileHackingCheatSheet

  Basics on commands/tools/info on how to assess the security of mobile applications

  1.5k5611241

• projectdiscovery/shuffledns

  MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

  Language:Go1.4k3783196

• gwen001/github-search

  A collection of tools to perform searches on GitHub.

  Language:Python1.4k3730353

• ZupIT/horusec

  Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

  Language:Go1.2k49284195

• ozguralp/gmapsapiscanner

  Language:Python9752414183

• tomnomnom/qsreplace

  Accept URLs on stdin, replace all query string values with a user-supplied value

  Language:Go8022011124

• evilpenguin/SSLBypass

  iOS SSL Pinning Bypass (iOS 8 - 14)

  Language:Objective-C++26017455

• odomojuli/regextokens

  list of regex patterns for oauth / api tokens with provided source

  25771062

• iGio90/frida-onload

  Frida module to hook module initializations on android

  Language:TypeScript674015

• tehryanx/sourcemapper

  Reconstruct javascript from a sourcemap in bash

  Language:Shell39109