A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Comprehensive Python Cheatsheet

Automatic SQL injection and database takeover tool

AI's query engine - Platform for building AI that can learn and answer questions over large scale federated data.

Web path scanner

E-mails, subdomains and names Harvester - OSINT

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Fast subdomains enumeration tool for penetration testers

Web application fuzzer

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Knock Subdomain Scan

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

A default credential scanner.

Drupal enumeration & exploitation tool

Note: Going through a full re-write of the tooling so the current versions in the repo do not work!

Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript of websites. Its vibrant ASCII art logo welcomes users to a…

The platform for building AI from enterprise data