The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

🤖 The Modern Port Scanner 🤖

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

OneForAll是一款功能强大的子域收集工具

Protect and discover secrets using Gitleaks 🔑

Automated & Manual Wordlists provided by Assetnote

Subdomain takeover vulnerability checker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

Protect your secrets using Gitleaks-Action

A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking out if subdomain takeover is possible.

Subdomain Takeover tool written in Go

Knock Subdomain Scan

Dorks for Bug Bounty Hunting

A tool for adding new lines to files, skipping duplicates

simple script to extract all web resources by means of .SVN folder exposed over network.

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

declutters url lists for crawling/pentesting

A curated list of various bug bounty tools

Find subdomains on GitHub.

grep rough audit - source code auditing tool

this html file creates a csrf poc form to any http request.

crawls the website and finds broken social media links that can be hijacked

Fetch many paths for many hosts - without killing the hosts

An hourly updated list of subdomains gathered from certificate transparency logs

Cam VIrus shoots from the target's phone front camera or PC webcam just sending a link.

s3 brute force tool

A list of resources for those interested in getting started in bug bounties

Tool for advanced mining for content on Github

A Python Script to Get Subdomain using https://crt.sh

The OWASP AppSec Browser Bundle is an open source Linux based penetration testing browser bundle built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web …