A project to track ideas needed by the infosec community.
☆11Dec 5, 2017Updated 8 years ago
Alternatives and similar repositories for ideas
Users that are interested in ideas are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A tool that can help detect and takeover subdomains with dead DNS records☆12Aug 23, 2018Updated 8 years ago
- A better dns bruteforcer written in golang☆13Nov 4, 2018Updated 8 years ago
- A simple tool to decloak/expose the bucket name behind a domain.☆25Mar 20, 2026Updated 7 months ago
- Script for monitoring changes in javascript files on WebApps for offensive reconnaissance.☆29Aug 4, 2021Updated 5 years ago
- A companion repo to accompany detailed guides and YouTube content to allow users to follow along☆13Aug 29, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆34Oct 1, 2019Updated 7 years ago
- WebDigger is a python based tool, specially created to get a company's unknown domain for pentestor.☆17Aug 6, 2016Updated 10 years ago
- This Burp Suite extension enables the generation of shareable links to specific requests which other Burp Suite users can import.☆13May 20, 2022Updated 4 years ago
- An intentionally vulnerable Web-Application based on OWASP 2013 Top 10 List.☆11Aug 1, 2024Updated 2 years ago
- Nodejs application intentionally vulnerable to SSRF☆42May 12, 2023Updated 3 years ago
- Small tool to log HTTP requests for debugging.☆16May 9, 2020Updated 6 years ago
- ☆126Mar 27, 2017Updated 9 years ago
- ❄️ Research project for SubFinder core API V2☆34Dec 30, 2018Updated 7 years ago
- This is a web application fuzzer scanner - the goal was CLI flexibility and rapid prototyping☆48Nov 12, 2019Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Repo of useful scripts☆103Jun 30, 2020Updated 6 years ago
- Finds the End-Points in JavaScript files☆101Oct 26, 2021Updated 5 years ago
- A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms ti…☆97Jun 5, 2021Updated 5 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆116Mar 29, 2019Updated 7 years ago
- Slides of the talk on Injection attacks in apps with NoSQL Backends, given at null OWASP Bangalore monthly meet on 27th April 2019☆21Apr 28, 2019Updated 7 years ago
- Enumerate subdomains by parsing Rapid7 FDNS dumps and CA transparency logs☆27Apr 26, 2019Updated 7 years ago
- ☆27Feb 16, 2021Updated 5 years ago
- Custom Parameter Handler extension for Burp Suite.☆44Feb 4, 2021Updated 5 years ago
- This information provides helpful information to make it easier to discover new attack surface on HackerOne.com.☆69Jan 24, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Get latest Exploit Databases notification on your Desktop☆16Jan 29, 2020Updated 6 years ago
- OWASP Skanda - SSRF Exploitation Framework☆39Jul 6, 2013Updated 13 years ago
- Recon scripts for bug hunting☆10Nov 19, 2021Updated 4 years ago
- Takes ip range, Scan all open SSL Certs, Grab Cnames☆110Sep 23, 2018Updated 8 years ago
- Computer Science (data structures, algorithms), challenges solutions from LeetCode, Advent Of Code, Project Euler etc.☆12Jul 24, 2026Updated 3 months ago
- 🛡 Monitor, analyze, & report security misconfigurations across environments.☆18Oct 26, 2017Updated 9 years ago
- Python script to check GitHub accounts for world-editable wiki pages☆21May 8, 2023Updated 3 years ago
- Reconnaisance Tool☆12Jun 4, 2020Updated 6 years ago
- Native Android software for dumping memory from Android processes☆14Sep 18, 2014Updated 12 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆15Aug 25, 2023Updated 3 years ago
- my talk on defcon26☆20Sep 29, 2018Updated 8 years ago
- Burp Suite extension to passively scan for applications revealing server error messages☆65Dec 15, 2023Updated 2 years ago
- The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.☆15Nov 23, 2018Updated 7 years ago
- Scans a list of websites for Cloudfront or S3 Buckets☆109Oct 28, 2025Updated last year
- Example of a serverless web reconaissance workflow's AWS architecture.☆11Feb 25, 2023Updated 3 years ago
- SSRF (Server Side Request Forgery) testing resources☆13Sep 7, 2017Updated 9 years ago