🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
翻译 - 🦊DalFox（XSS的查找器）/基于golang的参数分析和XSS扫描工具
💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
翻译 - 生成一堆带有回拨功能的恶意 pdf 文件。可以与 Burp Collaborator 一起使用
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
翻译 - InQL-GraphQL安全测试的Burp扩展
Tips and Tutorials for Bug Bounty and also Penetration Tests.
BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.
翻译 - BigBountyRecon工具利用58种不同的技术，使用了各种Google工具和开源工具，以加快对目标组织的初步侦查过程。
#网络爬虫#The fastest dork scanner written in Go.
#网络爬虫#ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distributed nodes
#安全#MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in ...
Payload Arsenal for Pentration Tester and Bug Bounty Hunters
翻译 - 渗透测试仪和Bug赏金猎人的有效负载库
An IIS short filename enumeration tool
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀
A tool to check a bunch of URLs that contain reflecting params.
Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including do...
A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.
翻译 - 一个用 GO 编写的扫描器/漏洞利用工具，它通过利用已知的小工具来利用 Prototype Pollution to XSS。
挖掘国内外漏洞平台必备的自动化捡钱赏金技巧，看了并去做了捡钱如喝水。
Discover new target domains using Content Security Policy
Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.