coboleng Goto Github PK

affinis

Recurrent Neural Network SubDomain Discovery Tool

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

blackbird

An OSINT tool to search for accounts by username in social networks.

blind-sql-error-based

blind sql injection error based script for infering an admin password

blindsqlinection

a script for bruteforcing password from the DB using blind SQL injection vuln in the cookie value

cli

Official Command Line Interface for the IPinfo API (IP geolocation and other types of IP data)

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

hijagger

Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration

htb-nunchucks

httpx

httpx is a fast and multi-purpose HTTP toolkit allows to run multiple probers using retryablehttp library, it is designed to maintain the result reliability with increased threads.

interactsh

An OOB interaction gathering server and client library

lolbas

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)

memlabs

Educational, CTF-styled labs for individuals interested in Memory Forensics

metabigor

Intelligence tool but without API key

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

onelistforall

Rockyou for web fuzzing

oscp-pre-preparation-plan-and-notes

My OSCP Pre-Preparation Phase. I'm not sure if I'll be able to afford the exam but what count's trying and learning things. I'm gonna give it a try. [Start Date: 21st March 2022]

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

php_include

powersploit

PowerSploit - A PowerShell Post-Exploitation Framework

redteaming-tactics-and-techniques

Red Teaming Tactics and Techniques

securitytips

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

subfinder

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

tbhm

The Bug Hunters Methodology

waymore

Find way more from the Wayback Machine!

xnlinkfinder

A python tool used to discover endpoints for a given target

xs-leak