edoardottt / secfiles
My useful files for penetration tests, security assessments, bug bounty and other security related stuff
☆141Updated this week
Related projects ⓘ
Alternatives and complementary repositories for secfiles
- Describe how to use ffuf different options with examples☆80Updated last year
- Here Are Some Bug Bounty Resource From Twitter☆85Updated 6 months ago
- Enumerate Subdomains Through Google Dorks☆122Updated 3 years ago
- This repository contains some of the most exhaustive wordlists for enumeration, gathered from a lot of wordlists available on the Interne…☆96Updated last month
- ☆146Updated last year
- Real world bug bounty wordlists☆110Updated last year
- ☆68Updated last year
- ☆57Updated 3 months ago
- Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using…☆145Updated 10 months ago
- Private Nuclei Templates☆88Updated last year
- Collect XSS vulnerable parameters from entire domain.☆145Updated 2 years ago
- Save your dorking results to the terminal. A modified version of TomNomNom's amazing tool!☆84Updated 9 months ago
- Go scanner to find web cache poisoning vulnerabilities in a list of URLs☆127Updated 9 months ago
- A collection oneliner scripts for bug bounty☆171Updated 8 months ago
- Learn how to automate XSS, SSRF, LFI, SQLI, NoSQLi☆38Updated 3 years ago
- Make URL path combinations using a wordlist☆172Updated last year
- ☆107Updated last year
- Subdomains enumeration, various scans and testing of some vulnerabilities.☆75Updated 6 months ago
- Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript…☆79Updated 3 months ago
- This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.☆96Updated last month
- ☆130Updated last week
- Never forget where you inject.☆211Updated last year
- A tool that automates the search for IDOR vulnerabilities in web apps and APIs☆50Updated 3 years ago
- A path-normalization pentesting tool.☆117Updated last year
- CVE Collection of jQuery UI XSS Payloads☆115Updated last year
- 🔭 Collection of regexp pattern for security passive scanning☆114Updated last year
- Advanced Reconnaissance and Web Application Discovery☆75Updated 2 years ago
- The scripts I write to help me on my bug bounty hunting☆120Updated 2 years ago
- Inside403 is a powerful and versatile web security testing tool designed to assess the robustness of web pages and directories against 40…☆29Updated last year
- Recon MindMap (RMM)☆140Updated 5 months ago