🛰️ Represent any GraphQL API as an interactive graph

🌎 Public GraphQL API for information about countries

GraphQL security workshop labs

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

Combine the lines from two files in every combination

Fetch all the URLs that the Wayback Machine knows about for a domain

A code-searching tool similar to ack, but faster.

🙃 A delightful community-driven (with 2,500+ contributors) framework for managing your zsh configuration. Includes 300+ optional plugins (rails, git, macOS, hub, docker, homebrew, node, php, python…

Amazon bucket brute force tool

A tool to perform DNS reconnaissance on target networks. Among the DNS information got from include subdomains, mx records, web application firewall detection and more fingerprinting and lookups

Create nice directory listings for s3 buckets with javascript and HTML.

Scan for misconfigured S3 buckets across S3-compatible APIs!

This script is intended to automate your reconnaissance process in an organized fashion

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

Apache Solr open-source search software

The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

A wrapper around grep, to help you grep for things

The Fairly Fast Fetcher. Requests a bunch of URLs provided on stdin fairly quickly.

Fetch many paths for many hosts - without killing the hosts

Take a list of domains and probe for working HTTP and HTTPS servers

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

A tool for adding new lines to files, skipping duplicates

Fast passive subdomain enumeration tool.

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.