In-depth Attack Surface Mapping and Asset Discovery

A tool for adding new lines to files, skipping duplicates

Hunt down the secrets from the WebArchives for Fun and Profit

HTTP parameter discovery suite.

Find domains and subdomains related to a given domain

This tool downloads, installs, and configures a shiny new copy of Chromium.

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

The dynamic infrastructure framework for anybody! Distribute the workload of many different tools with ease, including nmap, ffuf, masscan, nuclei and many more!

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool…

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

A BurpSuite plugin for BBRF

The client component of the Bug Bounty Reconnaissance Framework (BBRF)

The server component of the bug bounty reconnaissance framework (BBRF)

C2/post-exploitation framework

The new bridge between Burp Suite and Frida!

Because just a dark theme wasn't enough!

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

Go client to communicate with Chaos DNS API.

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

Web path scanner

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

A tool made in order to pick up pages and look up for possible git exposures inside them.

A fast, simple, recursive content discovery tool written in Rust.

Fast web fuzzer written in Go

The complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, multiple API…

Firepwn is a tool made for testing the Security Rules of a firebase application.

List of fresh DNS resolvers updated daily