657 Open source projects that are alternatives of or similar to Subzy

🦄🔒 Awesome list of secrets in environment variables 🖥️

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

Information Security Library

Extract API keys from file or url using by magic of python and regex.

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

🎯 Command Injection Payload List

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

🎯 XML External Entity (XXE) Injection Payload List

Python library and CLI for the Bug Bounty Recon API

Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to overcome the risk of external attacks.

A collection of some of my scripts

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Misc. Public Reports of Penetration Testing and Security Audits.

Command line tool for testing CRLF injection on a list of domains.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Discover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam #bugbounty

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

Open Redirect scanner - (out of date)

A python tool to check subdomain takeover vulnerability

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

a Go code to detect leaks in JS files via regex patterns

PHP Security Check List [ EN ] 🌋 ☣️

This repository contains writeups for various CTFs I've participated in (Including Hack The Box).

A Python DNS crawler to find identical domain names under different TLDs.

Repository of my CTF writeups

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)

Awesome cloud enumerator

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

Detects the algorithm of input JWT Token and provide options to generate the new JWT token based on the user selected algorithm.

C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can later be weaponized during Red Team Operations to evade EDR's.

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

Make your own BadUSB device!

Yet Another PHP Shell - The most complete PHP reverse shell

No description or website provided.

🙈 Interactively find and recover deleted or 👉 overwritten 👈 files from your terminal

Pentest/BugBounty progress control with scanning modules

Functions that can be used to gain Reverse Shells with PowerShell

This is the main repository of International Data Spaces Association on GitHub, where you can find general overview and required information on IDS Open Source Landscape.

News and publication on cybersecurity in industry

Flutter Reverse Engineering Framework

A semi-curated list of Security Feeds

This script will you help to find the information about the website and to help in penetrating testing

An automated approach to performing recon for bug bounty hunting and penetration testing.

Comprehensive Web Based Phishing Suite for Rapid Deployment and Real-Time Alerting!

Plugin to block compilation when unapproved dependencies are used or code styling does not comply.

A fully automatic wifi deauther coded in Python

Security guidance from the MOJ Digital & Technology Cybersecurity team

Aggregated Indicators of Compromise collected and cross-verified from multiple open and community-supported sources, enriched and ranked using our intelligence platform for you. Threat Intelligence, Threat feed, Open source feed.

Security tool to quickly audit Public Box files and folders.

澳門網絡安全暨奪旗競賽協會(Macau Cyber Security and Capture The Flag Association)MOCSCTF/MOCTF

A Tool for Domain Flyovers

A Docker Image For the Open Vulnerability Assessment Scanner (OpenVAS)

List of bug bounty and coordinated vulnerability disclosure programs of companies/organisations in Switzerland

一款适用于红蓝对抗中的仿真钓鱼系统

EKOLABS esta dedicada para investigadores independientes y para la comunidad del Software Libre. Vamos a proveer de stands completos con monitor, alimentacion de energia y acceso a internet por cable, y vos vas a traer tu maquina para mostrar tu trabajo y responder preguntas de los participantes de Ekoparty Security Conference

🔐 Vulnerability remediation scoring system

An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentesters, reverse engineer, and redteamers.