An archive of 0day.today exploits

The Serverless Blind XSS App

OpenVPN road warrior installer for Ubuntu, Debian, CentOS and Fedora

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the…

🕵️‍♂️ Investigate Google Accounts with emails.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Import and export GitHub issues via CSV

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Copies of my 'Script Center' and 'Technet Gallery' publications

Tools, data, and contact lists relevant to The disclose.io Project.

List of Repositories

Perform operations on URLs like extracting paths, parameter names and/or values, domain name, host name (without HTTP[s]).

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

*Frequently Updated. Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewallin…

A site for CISA directives

The official Exploit Database repository

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

SpiderFoot automates OSINT collection so that you can focus on analysis.

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

Fast Google Dorks Scan

A one liner Bash command which finds CORS in every possible endpoint.

Urls status code & content length checker

Application Security Verification Standard

Fresh DNS servers

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output…

A Collection of Android Pentest Learning Materials