n0kovo / awesome-wordlists
A curated list wordlists for bruteforcing and fuzzing
☆82Updated last year
Alternatives and similar repositories for awesome-wordlists:
Users that are interested in awesome-wordlists are comparing it to the libraries listed below
- A simple automation tool to detect lfi, rce and ssti vulnerability☆55Updated 3 years ago
- ☆18Updated last year
- Web Hacking and Red Teaming MindMap☆70Updated 2 years ago
- Automate Scoping, OSINT and Recon assessments.☆95Updated last month
- Red Teaming tools and techniques☆50Updated 2 years ago
- Mining URLs from Wayback Machine for bug hunting/fuzzing/further probing☆55Updated last year
- An offensive security tool used to enumerate and spray passwords for O365 accounts on both Managed and Federated AD services.☆48Updated 2 years ago
- Automated Subdomain Enumeration and Scanning Tool☆112Updated last year
- a simple discovery script that uses popular tools like subfinder, amass, puredns, alterx, massdns and others☆77Updated last year
- WPXStrike is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's criticals…☆65Updated last year
- PassMute - A multi featured Password Transmutation/Mutator Tool☆51Updated last year
- ☆26Updated 2 years ago
- ☆64Updated last year
- Python tool to test known techniques to bypass 403 and 401 HTTP responses.☆35Updated last year
- Docker network containing many vulnerable targets for practicing Red Teaming concepts (initial access, priv esc, persistence, lateral, C2…☆84Updated last year
- ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, …☆34Updated last year
- Collection of Stuff☆14Updated last year
- Frogy 2.0 is an automated external reconnaissance and Attack Surface Management (ASM) toolkit☆39Updated this week
- "XSS automation tool helps hackers identify and exploit cross-site scripting vulnerabilities in web apps. Tests for reflected and persist…☆92Updated 7 months ago
- ☆72Updated 10 months ago
- ☆53Updated 2 years ago
- CVE-2024-24919 [Check Point Security Gateway Information Disclosure]☆31Updated 9 months ago
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆39Updated 11 months ago
- WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find ent…☆120Updated 2 years ago
- A simple utility to quickly gather historic Port and CVE exposures from an IP range.☆38Updated last year
- Arescan is a powerful web directory discovery tool that helps you uncover hidden directories and links on any website. By performing a br…☆30Updated last year
- Oneliner Bug Bounty Collection collected from GitHub to all bug bounty hunters☆30Updated last year
- Tips, Tricks, and Scripts for Linux Post Exploitation☆38Updated 2 years ago
- Workshop & Talk Slide Decks from HackSpaceCon☆25Updated 9 months ago
- Filter URLs to save your time.☆59Updated 2 years ago