Ice3man

SubOver. A Powerful Subdomain Takeover Tool

hawkeye. Hawkeye filesystem analysis tool

ZeusInjector. An Open Source Windows DLL Injector With All Known Techniques Available

MalScan. A Simple PE File Heuristics Scanners

waybackurls. Fetch all the URLs that the Wayback Machine knows about for a domain

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

Python-For-Hackers. A Tutorial For Hackers Beginning With python (Incomplete)

Sudomy. Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Dll-Injection. A Medium Article for DLL Injection

hacks-2. Repo of useful scripts

hacks-1. A collection of hacks and one-off scripts

LinEnum. Scripted Local Linux Enumeration & Privilege Escalation Checks

AwesomeXSS. Awesome XSS stuff

gowitness. 🔍 gowitness - a golang, web screenshot utility using Chrome Headless

forgedhallpass.

ffuf. Fast web fuzzer written in Go

render. easily manage HTTP request / response payloads of Go HTTP services

doh. 🍩 DNS over HTTPs command-line client

gobuster. Directory/file & DNS busting tool written in Go

Hackerone. Hackerone disclosed report URL Aggregator

go. The Go programming language

goGetBucket. A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.

slack-go-webhook. Go Library to send messages to Slack via Webhooks

bugcrowd-levelup-subdomain-enumeration. This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

talisman. By hooking into the pre-push hook provided by Git, Talisman validates the outgoing changeset for things that look suspicious - such as authorization tokens and private keys.

inception. A highly configurable tool to check for whatever you like against any number of hosts.

pathbrute. Pathbrute

rawhttp. A Go library for making HTTP requests with complete control

zcrypto. Liberal Go TLS + X.509 Library for Research

what-happens-when. An attempt to answer the age old interview question "What happens when you type google.com into your browser and press enter?"

megplus. Automated reconnaissance wrapper — TomNomNom's meg on steroids.

tko-subs. A tool that can help detect and takeover subdomains with dead DNS records