A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
Web path scanner
Fast passive subdomain enumeration tool.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
An HTTP toolkit for security research.
A list of resources for those interested in getting started in bug bounties
Automated penetration testing & attack surface management platform. Recon, scan, exploit, report - 600+ exploits, 90+ integrations, 10K+ detections.
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The recursive internet scanner for hackers. 🧡
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
A list of interesting payloads, tips and tricks for bug bounty hunters.
Scanning APK file for URIs, endpoints & secrets.
Automated Αll-in-One OS command injection exploitation tool.
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Automated NoSQL database enumeration and web application exploitation tool.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
A big list of Android Hackerone disclosed reports and other resources.
Security Tool to Look For Interesting Files in S3 Buckets
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Automated Red Team Infrastructure deployement using Docker
StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING