gub0x1 Goto Github PK

003recon

Some tools to automate recon - 003random

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

actarus

Actarus is a custom tool for bug bounty

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

apkurlgrep

Extract endpoints from APK files

aquatone

A Tool for Domain Flyovers

assetnote

Push notifications for passive DNS data

autosubtakeover

A tool used to check if a CNAME resolves to the scope adress. If the CNAME resolves to a non-scope adress it might be worth checking out if subdomain takeover is possible.

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

backslash-powered-scanner

Finds unknown classes of injection vulnerabilities

bass

Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers to your "resolver.txt"

broken-link-checker

Find broken links, missing images, etc in your HTML.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks.

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bucrowd LevelUp 2017 virtual conference

burp-multi-browser-highlighting

Highlight Burp proxy requests made by different browsers

burpsmartbuster

A Burp Suite content discovery plugin that add the smart into the Buster!

cansina

Web Content Discovery Tool

censys

Python code to query the Censys public scan database.

chrome-har-capturer

Capture HAR files from a headless Chrome instance

collaborator-everywhere

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

commonspeak

Content discovery wordlists generated using BigQuery

detectdynamicjs

The DetectDynamicJS Burp Extension provides an additional passive scanner that tries to find differing content in JavaScript files and aid in finding user/session data.

distribute-damage

Evenly distributes scanner load across targets

dnscan

dnspop

Analysis of DNS records to find popular trends

domain_analyzer

Analyze the security of any domain by finding all the information possible. Made in python.

external_web_sources

A python script to pull script src, iframe src, window data values from BurpSuite proxy logs.

eyewitness

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

ffmpeg-avi-m3u-xbin