vitezslav-lindovsky's Stars
danielmiessler/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
shieldfy/API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
ffuf/ffuf
Fast web fuzzer written in Go
projectdiscovery/subfinder
Fast passive subdomain enumeration tool.
facebook/pyre-check
Performant type-checking for python.
lorien/awesome-web-scraping
List of libraries, tools and APIs for web scraping and data processing.
mandiant/flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
EdOverflow/bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
hakluke/hakrawler
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
mandiant/capa
The FLARE team's open-source tool to identify capabilities in executable files.
minimaxir/hacker-news-undocumented
Some of the hidden norms about Hacker News not otherwise covered in the Guidelines and the FAQ.
tomnomnom/assetfinder
Find domains and subdomains related to a given domain
screetsec/Sudomy
Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
rusq/slackdump
Save or export your private and public Slack messages, threads, files, and users locally without admin privileges.
hakluke/hakrevdns
Small, fast tool for performing reverse DNS lookups en masse.
irsdl/IIS-ShortName-Scanner
latest version of scanners for IIS short filename (8.3) disclosure vulnerability
intrigueio/intrigue-core
Discover Your Attack Surface!
jdonsec/AllThingsSSRF
This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location
projectdiscovery/public-bugbounty-programs
Community curated list of public bug bounty and responsible disclosure programs.
SentineLabs/AlphaGolang
IDApython Scripts for Analyzing Golang Binaries
dg/rss-php
Small and easy-to-use library for consuming RSS and Atom feeds
stefanoj3/dirstalk
Modern alternative to dirbuster/dirb
cisagov/crossfeed
External monitoring for organization assets
Swizec/nightowls
Why programmers work at night - a book about programmers, by a programmer
JoshuaMart/AutoRecon
Simple shell script for automated domain recognition with some tools
hash3liZer/Subrake
🚀 A DNS automated scanner and tool 🖱️ (Zone Transfer, DNS Zone Takeover, Subdomain Takeover).
sbp/gin
Git index file parser, using python3
LuD1161/HackingSimplified
This is where I share code/material shown in my videos
KevinHock/keyhacks
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
pionl/laravel-lelastico
Focus of this library is to make it easier to manage elastic indices (wit mappings / settings), create reusable query building (manual or from request).