bbhunter Goto Github PK

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

awesomexss

Awesome XSS stuff

aws-enumerator

The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testing. The tool is intended to speed up the process of Cloud review in case the security researcher compromised AWS Account Credentials.

aws-extender

AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.

aws-loot

Pull secrets from an AWS environment

aws-scanner

Scans a list of websites for Cloudfront or S3 Buckets

aws_secret_finder

A Burp extension for finding AWS secrets

awsbucketdump

Security Tool to Look For Interesting Files in S3 Buckets

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

awslambdaproxy

An AWS Lambda powered HTTP/SOCKS web proxy

awsome-pentesting

My cheatsheet notes to pentest AWS infrastructure

awsome-security-write-ups-and-pocs

Awesome Writeups and POCs

awsrecon

Tool for reconnaissance of AWS cloud environments

awsscrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

awssigner

Burp Extension for AWS Signing

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

ayfabtu

Scripts to extract files from SCM directories left on web servers

aymansecnotes

This repository contains all my notes. Feel free to use them, share them or modify them.

az-blob-attacker

You can check below blog post on attacks related to azure storage.

azredteamenumscript

Azure AD RedTeam Full Enumeration Script used to query all aspects of your target Azure tenant.

azure-mindmap

a map for the azure oriented pentests

azure_workshop

azuregoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

b0untyz

bug bounty automation suite

b1tmass

Multiple Weaknesses Checking for Mass Subdomains

babysploit

BabySploit Beginner Pentesting Toolkit/Framework Written in Python

bachelors-thesis-http-request-smuggling

back-me-up

This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.

backbomb

💣 Dockerized penetration-testing/bugbounty/app-sec testing environment

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities