distribute readme
hahwul
parent
67b509220a
commit
14683844b9
|
|
@ -48,6 +48,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||
| Discovery/GIT | [gitleaks](https://github.com/zricethezav/gitleaks) | Scan git repos for secrets using regex and entropy 🔑 |  |  |
|
||||
| Discovery/GIT | [gitrob](https://github.com/michenriksen/gitrob) | Reconnaissance tool for GitHub organizations |  |  |
|
||||
| Discovery/HTTP | [Arjun](https://github.com/s0md3v/Arjun) | HTTP parameter discovery suite. |  |  |
|
||||
| Discovery/HTTP | [Aron](https://github.com/m4ll0k/Aron) | Aron is a GO script for finding hidden GET & POST parameters |  |  |
|
||||
| Discovery/PORT | [Shodan](https://www.shodan.io/) | World's first search engine for Internet-connected devices| | |
|
||||
| Discovery/PORT | [masscan](https://github.com/robertdavidgraham/masscan) | TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. |  |  |
|
||||
| Discovery/PORT | [naabu](https://github.com/projectdiscovery/naabu) | A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests |  |  |
|
||||
|
|
@ -90,6 +91,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||
| Scanner/XSS | [dalfox](https://github.com/hahwul/dalfox) | 🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang |  |  |
|
||||
| Scanner/XSS | [ezXSS](https://github.com/ssl/ezXSS) | ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. |  |  |
|
||||
| Scanner/XSS | [xsser](https://github.com/epsylon/xsser) | Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. |  |  |
|
||||
| Utility/CALLBACK | [dnsobserver](https://github.com/allyomalley/dnsobserver) | A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. |  |  |
|
||||
| Utility/CSP | [CSP Evaluator](https://csp-evaluator.withgoogle.com) | Online CSP Evaluator from google| | |
|
||||
| Utility/ENV | [Gf-Patterns](https://github.com/1ndianl33t/Gf-Patterns) | GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic) parameters grep |  |  |
|
||||
| Utility/ENV | [recon_profile](https://github.com/nahamsec/recon_profile) | Recon profile (bash profile) for bugbounty |  |  |
|
||||
|
|
@ -99,6 +101,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||
| Utility/GREP | [gf](https://github.com/tomnomnom/gf) | A wrapper around grep, to help you grep for things |  |  |
|
||||
| Utility/JSON | [gron](https://github.com/tomnomnom/gron) | Make JSON greppable! |  |  |
|
||||
| Utility/PAYLOAD | [PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings) | A list of useful payloads and bypass for Web Application Security and Pentest/CTF |  |  |
|
||||
| Utility/PENTEST | [axiom](https://github.com/pry0cc/axiom) | A dynamic infrastructure toolkit for red teamers and bug bounty hunters! |  |  |
|
||||
| Utility/S3 | [s3reverse](https://github.com/hahwul/s3reverse) | The format of various s3 buckets is convert in one format. for bugbounty and security testing. |  |  |
|
||||
| Utility/SHOT | [gowitness](https://github.com/sensepost/gowitness) | 🔍 gowitness - a golang, web screenshot utility using Chrome Headless |  |  |
|
||||
| Utility/TEMPLATE | [bountyplz](https://github.com/fransr/bountyplz) | Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) |  |  |
|
||||
|
|
@ -115,6 +118,7 @@ A collection of cool tools used by Web hackers. Happy hacking , Happy bug-huntin
|
|||
| Utility/VULN | [postMessage-tracker](https://github.com/fransr/postMessage-tracker) | A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon |  |  |
|
||||
| Utility/VULN | [ysoserial](https://github.com/frohoff/ysoserial) | A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. |  |  |
|
||||
| Utility/WORD | [SecLists](https://github.com/danielmiessler/SecLists) | SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. |  |  |
|
||||
| Utility/WORD | [subs_all](https://github.com/emadshanab/subs_all) | Subdomain Enumeration Wordlist. 8956437 unique words. Updated. |  |  |
|
||||
## Contribute
|
||||
### Usage of add-tool
|
||||
```
|
||||
|
|
|
|||
24
data.json
24
data.json
|
|
@ -9,6 +9,11 @@
|
|||
"Method": "HTTP",
|
||||
"Type": "Discovery"
|
||||
},
|
||||
"Aron": {
|
||||
"Type": "Discovery",
|
||||
"Data": "| Discovery/HTTP | [Aron](https://github.com/m4ll0k/Aron) | Aron is a GO script for finding hidden GET \u0026 POST parameters |  |  |",
|
||||
"Method": "HTTP"
|
||||
},
|
||||
"BurpSuite": {
|
||||
"Data": "| Army-Knife/ALL | [BurpSuite](https://portswigger.net/burp) | the BurpSuite project | | |",
|
||||
"Method": "BURP",
|
||||
|
|
@ -180,9 +185,9 @@
|
|||
"Type": "Utility"
|
||||
},
|
||||
"aquatone": {
|
||||
"Type": "Discovery",
|
||||
"Data": "| Discovery/ALL | [aquatone](https://github.com/michenriksen/aquatone) | A Tool for Domain Flyovers |  |  |",
|
||||
"Method": "ALL"
|
||||
"Method": "ALL",
|
||||
"Type": "Discovery"
|
||||
},
|
||||
"arachni": {
|
||||
"Data": "| Scanner/WVS | [arachni](https://github.com/Arachni/arachni) | Web Application Security Scanner Framework |  |  |",
|
||||
|
|
@ -194,6 +199,11 @@
|
|||
"Method": "DOMAIN",
|
||||
"Type": "Discovery"
|
||||
},
|
||||
"axiom": {
|
||||
"Data": "| Utility/PENTEST | [axiom](https://github.com/pry0cc/axiom) | A dynamic infrastructure toolkit for red teamers and bug bounty hunters! |  |  |",
|
||||
"Method": "PENTEST",
|
||||
"Type": "Utility"
|
||||
},
|
||||
"bountyplz": {
|
||||
"Data": "| Utility/TEMPLATE | [bountyplz](https://github.com/fransr/bountyplz) | Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported) |  |  |",
|
||||
"Method": "TEMPLATE",
|
||||
|
|
@ -219,6 +229,11 @@
|
|||
"Method": "FUZZ",
|
||||
"Type": "Discovery"
|
||||
},
|
||||
"dnsobserver": {
|
||||
"Data": "| Utility/CALLBACK | [dnsobserver](https://github.com/allyomalley/dnsobserver) | A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack. |  |  |",
|
||||
"Method": "CALLBACK",
|
||||
"Type": "Utility"
|
||||
},
|
||||
"dnsprobe": {
|
||||
"Data": "| Discovery/DNS | [dnsprobe](https://github.com/projectdiscovery/dnsprobe) | DNSProb (beta) is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers. |  |  |",
|
||||
"Method": "DNS",
|
||||
|
|
@ -424,6 +439,11 @@
|
|||
"Method": "TKOV",
|
||||
"Type": "Discovery"
|
||||
},
|
||||
"subs_all": {
|
||||
"Data": "| Utility/WORD | [subs_all](https://github.com/emadshanab/subs_all) | Subdomain Enumeration Wordlist. 8956437 unique words. Updated. |  |  |",
|
||||
"Method": "WORD",
|
||||
"Type": "Utility"
|
||||
},
|
||||
"template-generator": {
|
||||
"Data": "| Utility/TEMPLATE | [template-generator](https://github.com/fransr/template-generator) | A simple variable based template editor using handlebarjs+strapdownjs. The idea is to use variables in markdown based files to easily replace the variables with content. Data is saved temporarily in local storage. PHP is only needed to generate the list of files in the dropdown of templates. |  |  |",
|
||||
"Method": "TEMPLATE",
|
||||
|
|
|
|||
Loading…
Reference in New Issue