Google dorking tool

Official Kali Linux tool to check all urls of a domain for SQL injections :)

Real-world infosec wordlists, updated regularly

Automated learning of regexes for DNS discovery

1337 Wordlists for Bug Bounty Hunting

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Boom 是一款基于无头浏览器的智能 Web 弱口令（后台密码）爆破\检测工具

Extract URLs, paths, secrets, and other interesting bits from JavaScript

An integrated BurpSuite vulnerability detection plug-in.

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。