Automated pentest framework for offensive security experts https://xerosecurity.com

https://github.com/1N3/Sn1per

https://ired.team/offensive-security-experiments/offensive-security-cheetsheets?

Collection of the cheat sheets useful for pentesting

https://github.com/coreb1t/awesome-pentest-cheat-sheets

Git All the Payloads! A collection of web attack payloads.

https://github.com/foospidy/payloads

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!


https://github.com/berzerk0/Probable-Wordlists

fire Everything awesome about web-application firewalls (WAF).

https://github.com/0xInfection/Awesome-WAF

PhpSploit is a remote control framework, aiming to provide a stealth interactive shell-like connection over HTTP between client and web server. It is a post-exploitation tool capable to maintain access to a compromised web server for privilege escalation purposes.

https://github.com/nil0x42/phpsploit

Automated Security Testing For REST API's

https://github.com/flipkart-incubator/Astra

A collective list of public JSON APIs for use in security.

https://github.com/daehee/security-apis

WebPwn3r - Web Applications Security Scanner.

https://github.com/zigoo0/webpwn3r

Search engines for Hackers:

https://censys.io
https://shodan.io
https://viz.greynoise.io/table
https://zoomeye.org
https://wigle.net
https://publicwww.com
https://hunter.io
https://haveibeenpwned.com
https://thispersondoesnotexist.com
https://osintframework.com

Slides :
https://drive.google.com/file/d/19UgHHSK8RsYz99xr8E9tFc7bsboIJHe1/view?fbclid=IwAR2qR5txpLrKgrPgl0GLiFPlmqPtweTEQwHqY0PoGrIE3gQFzjKWxcpHj5k
Video :
https://youtu.be/X0mV9HXbKHY

CORS Misconfiguration Scanner

https://github.com/s0md3v/Corsy