r0oth3x49 / ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
☆2,945Updated 3 weeks ago
Related projects: ⓘ
- Rockyou for web fuzzing☆2,547Updated 3 weeks ago
- 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.☆3,598Updated 2 weeks ago
- A simple script just made for self use for bypassing 403☆1,627Updated 3 months ago
- Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing☆2,461Updated 2 months ago
- An XSS exploitation command-line interface and payload generator.☆1,233Updated last month
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,122Updated 2 years ago
- SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files☆1,960Updated 3 months ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.☆3,870Updated 3 weeks ago
- An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!☆1,519Updated 6 months ago
- NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆1,236Updated this week
- Automatic SSRF fuzzer and exploitation tool☆2,937Updated 3 months ago
- Top disclosed reports from HackerOne☆3,720Updated 2 weeks ago
- Automated & Manual Wordlists provided by Assetnote☆1,284Updated last month
- A cheat sheet that contains advanced queries for SQL Injection of all types.☆2,798Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domain☆3,435Updated 4 months ago
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,362Updated 3 months ago
- Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)☆2,933Updated 2 months ago
- Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.☆1,433Updated 6 months ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆5,595Updated last week
- HTTP parameter discovery suite.☆5,122Updated 2 months ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆2,374Updated this week
- An OOB interaction gathering server and client library☆3,319Updated this week
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned ent…☆1,663Updated 2 weeks ago
- Take a list of domains and probe for working HTTP and HTTPS servers☆2,821Updated 2 months ago
- A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for att…☆4,609Updated last week
- A collection of awesome one-liner scripts especially for bug bounty tips.☆2,628Updated last month
- An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.☆2,611Updated 3 weeks ago
- For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙☆1,680Updated 3 months ago
- Real-world infosec wordlists, updated regularly☆1,350Updated this week
- Check your WAF before an attacker does☆1,244Updated last week