Deploy README.md
WHW
parent
3e8e17b1bd
commit
767db4cdfa
|
|
@ -28,7 +28,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
| | Attributes |
|
||||
|-------|---------------------------------------------------|
|
||||
| Types | `Army-Knife` `Recon` `Fuzzer` `Scanner` `Exploit` `Utils` `Etc`|
|
||||
| Tags | `proxy` `infra` `live-audit` `param` `endpoint` `subdomains` `apk` `dns` `domain` `jwt` `ssrf` `xss` `smuggle` `csp` `s3` `sqli` `403` `aaa` `ssl` `xxe` `url` `oast` `report` `wordlist` |
|
||||
| Tags | `proxy` `infra` `live-audit` `param` `endpoint` `subdomains` `apk` `dns` `domain` `jwt` `ssrf` `xss` `smuggle` `csp` `s3` `sqli` `403` `aaa` `ssl` `rop` `xxe` `url` `oast` `report` `wordlist` |
|
||||
| Langs | `Java` `Shell` `Go` `Rust` `C` `Python` `JavaScript` `Kotlin` `Ruby` `Perl` `TypeScript` `PHP` `BlitzBasic` `C#` `Typescript` `HTML` `C++` `Kotiln` `CSS` |
|
||||
|
||||
### Tools
|
||||
|
|
@ -37,7 +37,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
|Army-Knife|[BurpSuite](https://portswigger.net/burp)|the BurpSuite Project||`proxy`||
|
||||
|Army-Knife|[axiom](https://github.com/pry0cc/axiom)|A dynamic infrastructure toolkit for red teamers and bug bounty hunters! ||`infra`||
|
||||
|Army-Knife|[proxify](https://github.com/projectdiscovery/proxify)|Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation and replay||`proxy`||
|
||||
|Army-Knife|[zaproxy](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||`proxy`||
|
||||
|Army-Knife|[ZAP](https://github.com/zaproxy/zaproxy)|The OWASP ZAP core project||`proxy`||
|
||||
|Army-Knife|[hetty](https://github.com/dstotijn/hetty)|Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.||`proxy`||
|
||||
|Army-Knife|[wuzz](https://github.com/asciimoo/wuzz)|Interactive cli tool for HTTP inspection ||`proxy`||
|
||||
|Army-Knife|[jaeles](https://github.com/jaeles-project/jaeles)|The Swiss Army knife for automated Web Application Testing ||`live-audit`||
|
||||
|
|
@ -49,6 +49,7 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
|Recon|[SecretFinder](https://github.com/m4ll0k/SecretFinder)|SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files ||||
|
||||
|Recon|[getJS](https://github.com/003random/getJS)|A tool to fastly get all javascript sources/files||||
|
||||
|Recon|[parameth](https://github.com/maK-/parameth)|This tool can be used to brute discover GET and POST parameters||||
|
||||
|Recon|[Smap](https://github.com/s0md3v/smap/)|a drop-in replacement for Nmap powered by shodan.io||||
|
||||
|Recon|[gobuster](https://github.com/OJ/gobuster)|Directory/File, DNS and VHost busting tool written in Go ||||
|
||||
|Recon|[rengine](https://github.com/yogeshojha/rengine)|reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information. ||||
|
||||
|Recon|[naabu](https://github.com/projectdiscovery/naabu)|A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests ||||
|
||||
|
|
@ -210,10 +211,13 @@ A collection of awesome tools used by Web hackers. Happy hacking , Happy bug-hun
|
|||
|Exploit|[Gopherus](https://github.com/tarunkant/Gopherus)|This tool generates gopher link for exploiting SSRF and gaining RCE in various servers ||||
|
||||
|Exploit|[SQL Ninja](https://gitlab.com/kalilinux/packages/sqlninja)|SQL Injection scanner||||
|
||||
|Exploit|[xxeserv](https://github.com/staaldraad/xxeserv)|A mini webserver with FTP support for XXE payloads||||
|
||||
|Exploit|[ropr](https://github.com/Ben-Lichtman/ropr)|A blazing fast™ multithreaded ROP Gadget finder. ropper||`rop`||
|
||||
|Exploit|[XXEinjector](https://github.com/enjoiz/XXEinjector)|Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.||`xxe`||
|
||||
|Exploit|[toxssin](https://github.com/t3l3machus/toxssin)|An XSS exploitation command-line interface and payload generator.||`xss`||
|
||||
|Exploit|[SQLNinja](https://gitlab.com/kalilinux/packages/sqlninja)| SQL Injection scanner||||
|
||||
|Exploit|[singularity](https://github.com/nccgroup/singularity)|A DNS rebinding attack framework.||||
|
||||
|Exploit|[XSRFProbe](https://github.com/0xInfection/XSRFProbe)|The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.||||
|
||||
|Exploit|[beef](https://github.com/beefproject/beef)|The Browser Exploitation Framework Project||`xss`||
|
||||
|Exploit|[Sn1per](https://github.com/1N3/Sn1per)|Automated pentest framework for offensive security experts ||||
|
||||
|Utils|[burl](https://github.com/tomnomnom/burl)|A Broken-URL Checker ||`url`||
|
||||
|Utils|[gotestwaf](https://github.com/wallarm/gotestwaf)|An open-source project in Golang to test different web application firewalls (WAF) for detection logic and bypasses||||
|
||||
|
|
|
|||
|
|
@ -1 +1 @@
|
|||
Mon Aug 29 15:39:01 UTC 2022
|
||||
Tue Aug 30 15:45:20 UTC 2022
|
||||
|
|
|
|||
Loading…
Reference in New Issue