Web Application Security Automation Framework which recons the target for various assets to maximize the attack surface for security professionals & bug-hunters

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.

Community curated list of templates for the nuclei engine to find a security vulnerability in application.

Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the…

Reconness Agents Script

The ultimate subdomain monitorization framework

BBT - Bug Bounty Tools

APTnotes data

The all-in-one Red Team extension for Web Pentester 🛠

Scans SPF and DMARC records for issues that could allow email spoofing.

Subdomain Takeover tool written in Go

Find subdomains on GitHub

Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

Python library and CLI for the Bug Bounty Recon API

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output…

A MongoDB importer and API for Project Sonars DNS datasets

Custom pentesting tools

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

Pentesting/Bugbounty Dockerfiles.

Directory crawler with wordlist using python

Subdomain crawler with wordlist using python

ARP spoofer using scapy

Detect arp spoofing attacks on selected network interface

Packet sniffer using scapy

A python network scanner using scapy

My recon script

Python 3.5+ DNS asynchronous brute force utility