PikPikcU

Pentest-Tools-Framework. Pentest Tools Framework is a database of exploits, Scanners and tools for penetration testing. Pentest is a powerful framework includes a lot of tools for beginners. You can explore kernel vulnerabilities, network vulnerabilities

XRCross. XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

nodesub. Nodesub is a command-line tool for finding subdomains in bug bounty programs

nuubi. Nuubi Tools (Information-ghatering|Scanner|Recon.)

nuclei-templates. Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

js-finding. JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various extraction methods and provides additional options for file download and wordlists creation.

mtk-su. mtk-su

hostinject. hostinject (Host Header Injection) Tool is a Python script that allows you to perform host header injection vulnerability testing on a target URL or a list of URLs. It injects various header values and checks for potential vulnerabilities.

subdomain-monitoring-elasticsearch. Go

nuclei-fuzz.

nodecraw. nodecraw allows you to perform web crawling on specified URLs. It utilizes various modules and libraries to crawl web pages, extract information, and save the results.

naomi. Naomi is a simple OSINT and information gathering tool that can scan quickly.

awesome-cve-poc. ✍️ A curated list of CVE PoCs.

kurosploit. KuroSploit is an exploit tool, KuroSploit provides an easy way to create backdoors and payload.

bash-recon. [+] bash recon

WebHackersWeapons. ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

ResIm. ResIm is designed as a bash tool to find out domains,subdomains,ip subdomains, ports, DNS

ip2host. This tool performs TLS connections to specified IP addresses, retrieves host information, and optionally gathers detailed IP information using the ipapi.co API.

awesome-oneliner-bugbounty. A collection of awesome one-liner scripts especially for bug bounty tips.

my-nuclei-templates.

CloudFail. Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

EsubIz. EsubIz Tools,Passive subdomain Enumeration

crlfi. Go

bbot. OSINT automation for hackers.

open-source-web-scanners. A list of open source web security scanners

jaeles. The Swiss Army knife for automated Web Application Testing

TheFatRat. Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software

Awesome-WAF. 🔥 Everything about web-application firewalls (WAF).

freegeoip. IP geolocation web server

Bug-Bounty-Roadmaps. Bug Bounty Roadmaps

xssmap. XSSMap 是一款基于 Python3 开发用于检测 XSS 漏洞的工具

wadl-dumper. Dump all available paths and/ endpoints on WADL file.

fuzzing-templates. Community curated list of nuclei templates for finding unknown security vulnerabilities.

bug-actions.

pentest-tools. Custom pentesting tools

dotfile. Vim Script

Warez. All your base are belong to us!

bugbounty. Bugbounty Resources

dProgBb. Detect Program Bug Bounty

tlds. Go

cent. Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

SubOver. A Powerful Subdomain Takeover Tool

webHunt. Web App bug hunting

KingOfBugBountyTips.

top25-parameter. For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

Bug-Bounty-Toolz. BBT - Bug Bounty Tools

axiom. A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

bugbounty-cheatsheet. A list of interesting payloads, tips and tricks for bug bounty hunters.

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Payloads_xss_sql_bypass.

nuclei. Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

festin. FestIn - S3 Bucket Weakness Discovery

PoC-in-GitHub. 📡 PoC auto collect from GitHub.