gquere / pwn_jenkins

Related projects: ⓘ

• swisskyrepo / SSRFmap
  Automatic SSRF fuzzer and exploitation tool
  ☆2,937Updated 3 months ago
• defparam / smuggler
  Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3
  ☆1,785Updated 8 months ago
• snoopysecurity / awesome-burp-extensions
  A curated list of amazingly awesome Burp Extensions
  ☆2,943Updated 2 months ago
• ropnop / kerbrute
  A tool to perform Kerberos pre-auth bruteforcing
  ☆2,572Updated 3 weeks ago
• wagiro / BurpBounty
  Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the ac…
  ☆1,657Updated 4 months ago
• six2dez / OneListForAll
  Rockyou for web fuzzing
  ☆2,547Updated 3 weeks ago
• sagishahar / lpeworkshop
  Windows / Linux Local Privilege Escalation Workshop
  ☆1,845Updated last year
• jaeles-project / jaeles
  The Swiss Army knife for automated Web Application Testing
  ☆2,141Updated 4 months ago
• assetnote / wordlists
  Automated & Manual Wordlists provided by Assetnote
  ☆1,284Updated last month
• sleventyeleven / linuxprivchecker
  linuxprivchecker.py -- a Linux Privilege Escalation Check Script
  ☆1,545Updated 2 years ago
• nahamsec / lazyrecon
  This script is intended to automate your reconnaissance process in an organized fashion
  ☆1,895Updated 3 years ago
• PortSwigger / turbo-intruder
  Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.
  ☆1,459Updated this week
• netbiosX / Checklists
  Red Teaming & Pentesting checklists for various engagements
  ☆2,474Updated 3 weeks ago
• infosec-au / altdns
  Generates permutations, alterations and mutations of subdomains and then resolves them
  ☆2,299Updated 4 months ago
• 0xInfection / XSRFProbe
  The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
  ☆1,089Updated 4 months ago
• initstring / cloud_enum
  Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
  ☆1,628Updated 2 months ago
• tomnomnom / meg
  Fetch many paths for many hosts - without killing the hosts
  ☆1,587Updated 7 months ago
• cujanovic / SSRF-Testing
  SSRF (Server Side Request Forgery) testing resources
  ☆2,335Updated last year
• GerbenJavado / LinkFinder
  A python script that finds endpoints in JavaScript files
  ☆3,638Updated 5 months ago
• pry0cc / axiom
  The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, f…
  ☆3,983Updated last month
• tomnomnom / httprobe
  Take a list of domains and probe for working HTTP and HTTPS servers
  ☆2,821Updated 2 months ago
• devanshbatham / ParamSpider
  Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
  ☆2,461Updated 2 months ago
• tomnomnom / waybackurls
  Fetch all the URLs that the Wayback Machine knows about for a domain
  ☆3,435Updated 4 months ago
• hakluke / weaponised-XSS-payloads
  XSS payloads designed to turn alert(1) into P1
  ☆1,315Updated last year
• obheda12 / GitDorker
  A Python program to scrape secrets from GitHub through usage of a large repository of dorks.
  ☆2,253Updated last month
• dafthack / CloudPentestCheatsheets
  This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…
  ☆2,509Updated 11 months ago
• six2dez / pentest-book
  ☆1,535Updated last week
• EdOverflow / can-i-take-over-xyz
  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
  ☆4,756Updated last week
• haccer / subjack
  Subdomain Takeover tool written in Go
  ☆1,892Updated last year
• assetnote / kiterunner
  Contextual Content Discovery Tool
  ☆2,592Updated 4 months ago