Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

Scans software in Windows and Linux and compares against the NIST Vulnerability Database to identify present vulnerabilities. Includes optional scan for Microsoft hotfixes and patches.

Active Directory Pentesting Full Course - Red Team Hacking

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Quick SQLMap Tamper Suggester

Collection of github dorks and helper tool to automate the process of checking dorks

Sudomy is a subdomain enumeration tool, created using a bash script, to analyze domains and collect subdomains in fast and comprehensive way . Report output in HTML or CSV format

GitHound pinpoints exposed API keys on GitHub using pattern matching, commit history searching, and a unique result scoring system. A batch-catching, pattern-matching, patch-attacking secret snatch…

Github Scraper For Static Code Analysis

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

WAScan - Web Application Scanner

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

Next generation web scanner

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Gospider - Fast web spider written in Go

Web path scanner

Find domains and subdomains related to a given domain

A tool to get javascript files from a list of URLS or subdomains

Fast web fuzzer written in Go

IP lookup by favicon using Shodan

Takes a list of URLs and returns their HTTP response codes

Small, fast tool for performing reverse DNS lookups en masse.

Directory/File, DNS and VHost busting tool written in Go

Automated pentest framework for offensive security experts

A tool for adding new lines to files, skipping duplicates

Reconnaissance tool for GitHub organizations

XSS payloads for exploiting Markdown syntax

A tool that can help detect and takeover subdomains with dead DNS records

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…