seqrity Goto Github PK

my-nuclei-templates

paramspider

Mining parameters from dark corners of Web Archives

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pixload

Image Payload Creating/Injecting tools

plution

Prototype pollution scanner using headless chrome

priv8-nuclei-templates

My Priv8 Nuclei Templates

real_ip_discover

recon_profile

reghex

A collection of regexes for every possbile use

rengine

reNgine is an automated reconnaissance framework meant for information gathering during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

robotsdisallowed

A curated list of the most common and most interesting robots.txt disallowed directories.

samlists

Free, libre, effective, and data-driven wordlists for all!

shadowsocks

Shadowsocks installation guide on CentOS

shellcheck

ShellCheck, a static analysis tool for shell scripts

shodan_subdomain

Fetch subdomains from Shodan

subjs

Fetches javascript file from a list of URLS or subdomains.

subscraper

Perform subdomain enumeration through various techniques and retrieve detailed output to aid in further testing.

subzy

Subdomain takeover vulnerability checker

subzzz

SubzzZ to find possible subdomains using passive recon. Tool also support Permutations, Mutations, Alterations.

superwordlist

基于实战沉淀下的各种弱口令字典

taken

Takeover AWS ips and have a working POC for Subdomain Takeover.

test-cors.org

A tool to help test CORS requests

untrusted-types

urldedupe

Pass in a list of URLs with query strings, get back a unique list of URLs and query string combinations

uro

declutters url lists for crawling/pentesting

webdork

A Python tool to automate some dorking stuff to find information disclosures.

webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

wlist

xss-bypass-filters

xsstrike

Most advanced XSS scanner.