git-pub-ke Goto Github PK

aquatone

A Tool for Domain Flyovers

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 170 other CMSs

favfreak

Making Favicon.ico based Recon Great again !

ffmpeg-avi-m3u-xbin

git-hound

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

katana

A Python Tool For google Hacking

lfisuite

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

metabigor

Intelligence tool but without API key

open-redirect-payload-list

🎯 Open Redirect Payload List

pagodo

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

parameth

This tool can be used to brute discover GET and POST parameters

pencode

Complex payload encoder

recon-ng

Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.

spiderfoot

SpiderFoot automates OSINT collection so that you can focus on analysis.

sublist3r

Fast subdomains enumeration tool for penetration testers

subscraper

Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomains to enumerate a list of subdomains for a given URL.

subz

Just the coding simps.

webhunt

Web App bug hunting

xss_detect

A django application checks for XSS in a URL by extracting available parameters from the url and bruteforcing them with wordlist.

xsstrike

Most advanced XSS scanner.