tk-t0n0y Goto Github PK

burpsuite-plugins-extensions-arsenal

burpsuite_jsapi

A BurpSuite extension written by Python,used to find API interface in JS file.

bypass-url-parser

bypass-url-parser

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more...

celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

cero

Take a list of hosts and scrape domain names from their TLS certificates

certex

monitors certificate transparency logs

cloud_ip_ranges

Identify IP addresses owned by public cloud providers

cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

collabfiltrator

Exfiltrate blind remote code execution output over DNS via Burp Collaborator.

collaboratorplusplus

companies-hiring-security-remote

This repo is meant to be a list of companies that hire security people full remote.

cook

THE WORDLIST'S FRAMEWORK

csvtomd

📝📊 Convert your CSV files into Markdown tables.

ctf_onlinetools

Repository to index useful online tools for CTF

ctfhelper

A simple Burp extension for scanning stuffs in CTF

cve_collector_ninja

cve_monitor

Automatic monitor github cve using Github Actions

cvelist

Pilot program for CVE submission through GitHub

cvesearch

Query various sources for CVE proof-of-concepts

dastardly-github-action

Runs a scan using Dastardly by Burp Suite against a target site and creates a JUnit XML report for the scan on completion.

deduplicate

Remove duplicate urls from input

default-username-password-product

wordlist of default username and password from many product who was scrap from http://open-sez.me

dnsfookup

DNS rebinding toolkit

dnstake

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

docem

Uility to embed XXE and XSS payloads in docx,odt,pptx,etc (OXML_XEE on steroids)

dome

Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

dontgo403

Tool to bypass 40X response codes.