All In One Web Recon

Advanced CORS Header Checker Tool with Vulnerability Detection and Bypass Attempts

Web Path Finder

Web application pentesting recon

This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides information, methodology and resources to perform subdomain takeover attacks.

Small tool to decode ASP.NET __VIEWSTATE variable when doing webpentests

The simplest way to integrate your subdomain enum outputs with Burp Pro (Fast Crawler)

Open source self-hosted cyber security learning platform

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

A powerful recon tool

Whitepass Bypass Whitelist/Ratelimit Implementations in Web Applications/APIs

The CyberTalents repository is a collection of solutions and write-ups for challenges sourced from the CyberTalents platform. Organized topic, this repository serves as a resource for cybersecurity enthusiasts seeking to enhance their skills and understanding of security concepts.

shell script that automates the installation of essential bug bounty and web pentesting tools. It supports Linux and macOS

Erlik 2 - Vulnerable-Flask-App

jsonAnalytic - List all keys & all values in json

Self-Study About Cybersecurity (Summary of My Learning )

Hidden Fuzzer is a URL fuzzing tool designed to uncover hidden paths and resources on web applications. It features multithreading, customizable HTTP headers, and request parameters for optimized performance.

Sitemaps and Robots.txt for websites around the world.

A very fast webfuzzer, support encoders, working with raw requests

Sucks all embedded URLs from a given URI or file. Ideal to parse URLs from CSS or JavaScript (such as API calls, webservices, ;)