analyticsrelationships

Get related domains / subdomains by looking at Google Analytics IDs

ansible-playbooks

Some playbooks to manage some tasks

aws_beanstalk_python_tko

awsbeanstalk_tko_poc

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

bitup2021_subdominions

burp-bounty-profiles

Burp Bounty profiles compilation, feel free to contribute!

burpbounty

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules through a very intuitive graphical interface.

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

cdncheck

A filter to check for CDN IP addresses during port scanning.

cf-check

CloudFlare Checker written in Go

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

crtfinder

Fast tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com with standard and advanced search techniques

cve-2021-3129

Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129)

degoogle_hunter

Simple fork from degoogle original project with bug hunting purposes

dnscewl

A DNS Bruteforcing Wordlist Generator

dnstake

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

dontgo403

Tool to bypass 40X response codes.

dorks_hunter

Simple Google Dorks search tool

dotfiles

Just my dotfiles

dsieve

Take a list of urls and filter or extract domains by level.

enum_for_all

exploitation-course

Offensive Software Exploitation Course

eyeballer

Convolutional neural network for analyzing pentest screenshots

findomain

The complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API Keys for sources and much more.

front-page-exploit

HTTP requests of FrontPage expolit

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

github-subdomains

Find subdomains on GitHub

goop

Yet another tool to dump a git repository from a website, focused on as-complete-as-possible dumps and handling weird edge-cases.