#1Tools for gathering information about targets and identifying attack surfaces.
Kitploit recommended

An automated SMB relay exploitation script.

Scan Victim Backup Directories & Backup Files

Universal Dynamic Virtual Channel connector for Remote Desktop Services

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which…

A tool to quickly do keyword searches over Gitlab and Github for OSINT & bug bounty recon

An OSINT tool to find contacts in order to report security vulnerabilities.

This is a simple python tool to automatically deface webdav vulnerable websites.

pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound.

A collection oneliner scripts for bug bounty

A collection of useful links for Pentesters

peeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.

A BloodHound collector for Microsoft Configuration Manager

Network assessment tool for various UDP Services covering both IPv4 and IPv6 protocols

Maps attack surface of GWT applications by extracting obfuscated RPC endpoints and generating serialized request payloads for security testing.

TIH is an intelligence tool that helps you in searching for IOCs across multiple openly available security feeds and some well known APIs. The idea…

A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band…

CVE-2017-9506 - SSRF

Twitter Intelligence OSINT project performs tracking and analysis of the Twitter