673 Open source projects that are alternatives of or similar to Tools Tbhm

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

ARL(Asset Reconnaissance Lighthouse)资产侦察灯塔系统旨在快速侦察与目标关联的互联网资产，构建基础资产信息库。 协助甲方安全团队或者渗透测试人员有效侦察和检索资产，发现存在的薄弱点和攻击面。

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

HostHunter a recon tool for discovering hostnames using OSINT techniques.

The Swiss Army knife for automated Web Application Testing

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.

Web Application recon automation

This repository created for personal use and added tools from my latest blog post.

Rescope is a tool geared towards pentesters and bugbounty researchers, that aims to make life easier when defining scopes for Burp Suite and OWASP ZAP.

An open source tool to aid in command line driven generation of bug bounty reports based on user provided templates.

Fully automated offensive security framework for reconnaissance and vulnerability scanning

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.

A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

Automated NoSQL database enumeration and web application exploitation tool.

An automated target reconnaissance pipeline.

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

An effort to build a single place for all useful android and iOS security related stuff. All references and tools belong to their respective owners. I'm just maintaining it.

A curated list of various bug bounty tools

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

DNS-Discovery is a multithreaded subdomain bruteforcer.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports.

A note-taking macOS app for penetration-testers.

Custom memory allocator that helps discover reads from uninitialized memory

Exein core for Linux based firmware

A Colab For Bug Hunting!

OSS Vulnerability Scanner for Windows Platform

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

The request.bin of DNS request

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

A collection of Ansible Playbooks that configure Kali to use Fish & install a number of tools

Exploit management framework

Collecting & Hunting for IOCs with gusto and style

🔺 Red Team Hardware Toolkit 🔺

Repositório com conteúdo sobre web hacking em português

Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.

Quiver is the tool to manage all of your tools for bug bounty hunting and penetration testing.

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

A Central Control Plane for AWS Permissions and Access

Collection of PowerShell network security scripts for system administrators.

Android library to reveal or obfuscate strings and assets at runtime

Scanning APK file for URIs, endpoints & secrets.

🔒 A curated checklist of 300+ tips for protecting digital security and privacy in 2021

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

Tool made to automate tasks of pentesting.

The full story of the CLR implementation of Meterpreter

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

Python library and CLI for the Bug Bounty Recon API

A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.

Hashcat web interface

The dum^H^H^Hsimplest encryption tool in the world.

Use ExpiredDomains.net and BlueCoat to find useful domains for red team.

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.