A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Comprehensive Python Cheatsheet

Automatic SQL injection and database takeover tool

Platform for building AI that can learn and answer questions over federated data.

Web path scanner

E-mails, subdomains and names Harvester - OSINT

The Social-Engineer Toolkit (SET) repository from TrustedSec - All new versions of SET will be deployed here.

Fast subdomains enumeration tool for penetration testers

Web application fuzzer

EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

Knock Subdomain Scan

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

A default credential scanner.

Drupal enumeration & exploitation tool

Dons Js Scanner is a sleek command-line tool that hunts for hidden treasures—API keys, credentials, and secrets—lurking in the JavaScript of websites. Its vibrant ASCII art logo welcomes users to a…