Hidden parameters discovery suite

Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

A simple keylogger for Windows, Linux and Mac

HTTP parameter discovery suite.

Contextual Content Discovery Tool

Comprehensive Crawling

Collection of methodology and test case for various web vulnerabilities.

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

Pentester's Promiscuous Notebook

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automa…

The Bug Hunters Methodology

A Burp Suite Pro extension which augments your proxy traffic by injecting non-invasive headers designed to reveal backend systems by causing pingbacks to Burp Collaborator

Automated All-in-One OS Command Injection Exploitation Tool.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Most advanced XSS scanner.

🌙🦊 DalFox is an powerful open source XSS scanning tool and parameter analyzer, utility

Low bandwidth DoS tool. Slowloris rewrite in Python.

SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

E-mails, subdomains and names Harvester - OSINT

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Powerful framework for rogue access point attack.

Defeating Windows User Account Control

The ultimate WinRM shell for hacking/pentesting

Attack Surface Management Platform | Sn1perSecurity LLC

In-depth Attack Surface Mapping and Asset Discovery

Server-Side Template Injection and Code Injection Detection and Exploitation Tool