Tools

tomer8007/widevine-l3-decryptor

A Chrome extension that demonstrates bypassing Widevine L3 DRM

nullfuzz-pentest/shodan-dorks

Shodan Dorks

yunemse48/403bypasser

Automates HTTP 403 access control bypass techniques using header manipulation, path obfuscation, and HTTP method conversion for web application…

cappricio-securities/camjacking

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

certbot/certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…

apsdehal/awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

leebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

microcosm-cc/bluemonday

bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS

swisskyrepo/ssrfmap

Automatic SSRF fuzzer and exploitation tool

s0md3v/striker

Striker is an offensive information and vulnerability scanner.

iamj0ker/bypass-403

A simple script just made for self use for bypassing 403

google/martian

Martian is a library for building custom HTTP/S proxies

xnl-h4ck3r/xnlinkfinder

A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets

jvoisin/php-malware-finder

Detect potentially malicious PHP files

mak-/parameth

This tool can be used to brute discover GET and POST parameters

ayoubfathi/leaky-paths

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could…