Skip to content

Astrogeorgeonethree/Starred2

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

209 Commits
.github/workflows
.github/workflows
 
 
LICENSE
LICENSE
 
 
README.md
README.md
 
 
topics.md
topics.md
 
 

Repository files navigation

Awesome Stars Awesome

A curated list of my GitHub stars! Generated by starred.

Contents

AutoIt

Batchfile

BitBake

  • ehsahil/IntruderPayloads - A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

BlitzBasic

  • eslam3kl/SQLiDetector - Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for differe
  • 1N3/IntruderPayloads - A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

C

C#

C++

CSS

CoffeeScript

Dart

Dockerfile

  • mining-containers/xmrig - An up-to-date and easy to use XMRig image for mining Monero on any Docker host including Azure ACI and AWS ECS.
  • vulhub/vulhub - Pre-Built Vulnerable Environments Based on Docker-Compose
  • aaaguirrep/offensive-docker - Offensive Docker is an image with the more used offensive tools to create an environment easily and quickly to launch assessment to the targets.

Erlang

  • apache/couchdb - Seamless multi-master syncing database with an intuitive HTTP/JSON API, designed for reliability

Go

HTML

Hack

  • D3Ext/WEF - Wi-Fi Exploitation Framework
  • htr-tech/zphisher - An automated phishing tool with 30+ templates. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

Java

JavaScript

Jupyter Notebook

Kotlin

Lua

Makefile

Nim

Objective-C

Others

PHP

  • rabeltester44/Magentolog - Dump cc + mail
  • kristuff/abuseipdb-cli - A CLI tool to check ✔️, report 🚩 IP addresses, download blacklist 🚫 with AbuseIPDB API v2
  • helich0pper/Karkinos - Penetration Testing and Hacking CTF's Swiss Army Knife with: Reverse Shell Handling - Encoding/Decoding - Encryption/Decryption - Cracking Hashes / Hashing
  • kamerk22/AmazonGiftCode - Laravel package for Amazon Gift Codes On Demand (AGCOD). Integration for Amazon Incentive API 🎁
  • KatieP/gp-wp-core - Green Pages wordpress core plugin
  • sauladam/omnipay-paysafecard-rest - Omnipay driver for Paysafecard (REST API)
  • mollie/PrestaShop1.7 - iDEAL, Creditcard, Bancontact, SOFORT, Bank transfer, PayPal & paysafecard for Prestashop
  • A3h1nt/Grawler - Grawler is a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file.
  • Tuhinshubhra/RED_HAWK - All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
  • 0xb0y/Magento-Grabber - Auto exploiter + Dumper, steal information on victim site, and auto create mailer on victim
  • vitaminarts/Telegram-scraper-api - An easy-to-use PHP api for Getting contents of Telegram's public channels and groups Messages without needing to join them.
  • lucasfrag/Kali-Linux-Tools-Interface - Graphical Web interface developed to facilitate the use of security information tools.
  • steverobbins/magescan - Scan a Magento site for information
  • googleinurl/SCANNER-INURLBR - Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.
  • fuzzdb-project/fuzzdb - Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  • kakumanivrn/email_password_cracker - A PHP tool to perform dictionary attacks on Gmail, Microsoft Live and Hotmail accounts.
  • gwen001/s3-buckets-finder - Find aws s3 buckets and extract datas.
  • Znerox/wifimap - WiFi- and Bluetooth devices overlayed on Google Maps. Sourced from WiGLE Android app / Aircrack-ng.
  • rajkumardusad/IP-Tracer - Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.
  • davidtavarez/pinky - pinky - The PHP mini RAT (Remote Administration Tool)
  • binarymaster/3WiFi - 3WiFi Wireless Database
  • danielmiessler/SecLists - SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensi
  • noncent/instagram-data-scraper - Instagram Data Scraper, Instagram Web Scraper, Instagram Super Scraper is a PHP script which takes @user-name or #keywords as input and returns all information related to user or hash-tags e.g. likes,

Pascal

  • greatis/Anti-WebMiner - Anti-WebMiner protects your PC against web cryptocurrency miners (JS scripts like Coinhive executed in the browser) by modifying Windows hosts file

Perl

PowerShell

  • grumpychris/pentest-resources - Links, commands, tools etc. for use in pentesting
  • dafthack/PowerMeta - PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those files
  • dafthack/MailSniper - MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can b
  • SNGWN/Burp-Suite - || Activate Burp Suite Pro with Key-Generator and Key-Loader ||
  • Daksh777/windows10-debloat - Collection of various scripts and apps to debloat Windows 10 for better privacy, performance and optimization.
  • pratyakshm/WinRice - WinRice is a tool that uses PowerShell automation to setup your Windows devices.
  • BloodHoundAD/Legacy-AzureHound.ps1 -
  • NetSPI/MicroBurst - A collection of scripts for assessing Microsoft Azure security
  • securethelogs/RedRabbit - Red Team PowerShell Script
  • leebaird/discover - Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Kali Linux.

Python

Raku

Ruby

  • pedrib/PoC - Advisories, proof of concept files and exploits that have been made public by @pedrib.
  • listia/aws_agcod - Ruby API Library for Amazon Gift Card on Demand (AGCOD)
  • bonusly/tangolicious - Tangocard RaaS API v2 wrapper
  • dreadlocked/Drupalgeddon2 - Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
  • spree/spree_gateway - Huge collection of payment gateways for @spree. Stripe, Braintree, Apple Pay, Authorize.net and many others!
  • wpscanteam/wpscan - WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites.
  • bahaabdelwahed/killshot - A Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
  • digininja/CloudStorageFinder - A collection of tools to find data that has been made public in cloud storage systems such as S3 Buckets and Digital Ocean Spaces
  • rastating/wordpress-exploit-framework - A Ruby framework designed to aid in the penetration testing of WordPress systems.
  • hahwul/WebHackersWeapons - ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
  • hahwul/XSpear - Powerfull XSS Scanning and Parameter analysis tool&gem
  • hartator/wayback-machine-downloader - Download an entire website from the Wayback Machine.
  • dmayer/idb - idb is a tool to simplify some common tasks for iOS pentesting and research
  • rapid7/metasploit-framework - Metasploit Framework
  • pry0cc/CredCatch - Find plaintext credentials from emails in bulk from password dumps, and generate emails on the fly.
  • Netflix-Skunkworks/Scumblr - Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results
  • tresacton/dspectrumgui - The goal of this app is to make it trivial to demodulate most basic RF transmission, and provide a digital worksheet for your reverse engineering efforts.
  • urbanadventurer/WhatWeb - Next generation web scanner

Rust

Scala

Shell

  • m3n0sd0n4ld/GooFuzz - GooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced
  • projectzeroindia/CVE-2019-11510 - Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)
  • internetwache/GitTools - A repository with 3 tools for pwn'ing websites with .git repositories available
  • ckam/proxy_checker - simple proxy checker on bash
  • thevillagehacker/Bug-Hunting-Arsenal - The Repository contains various payloads, tools, tips and tricks from various hackers around the world. Please take a quick look down here 👇👇
  • indiancybertroops/DorKey - Dorkey is Dork generator For Sql Injection It includes Php Aspx And other extension Its Simple Fast And Lightweight Sqli Dork Generator
  • quickemu-project/quickemu - Quickly create and run optimised Windows, macOS and Linux desktop virtual machines.
  • machevalia/pwndb.sh - Script to utilize the v2 pwndb onion site to find leaked passwords.
  • martintjj/BreachCompilation - BreachCompilation Tools
  • v4d1/SpoofThatMail - Bash script to check if a domain or list of domains can be spoofed based in DMARC records
  • bhdresh/CVE-2021-33766 - ProxyToken (CVE-2021-33766) : An Authentication Bypass in Microsoft Exchange Server POC exploit
  • BonJarber/SecUtils - Random utilities from my security projects that might be useful to others
  • six2dez/OneListForAll - Rockyou for web fuzzing
  • ByDog3r/90s-Checker-Account - 𝟗𝟎'𝐬 𝐂𝐡𝐞𝐜𝐤; verify emails/users and passwords in some pages.
  • grahamhelton/dehashQuery - A script used to query the dehashed API and filter for more useful results
  • ShivamRai2003/Reconky-Automated_Bash_Script - Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.
  • clu3bot/owt - Update Version 3.1 added free SMS messaging.
  • dwisiswant0/findom-xss - A fast DOM based XSS vulnerability scanner with simplicity.
  • felipecaon/url2ip - Bash script that converts a list of subdomains to ips using dig.
  • NSAKEY/nsa-rules - Password cracking rules and masks for hashcat that I generated from cracked passwords.
  • bongochong/CombinedPrivacyBlockLists - Ad-blocking hosts files, IP block lists, PAC filters, and ABP / uBO subscriptions, all merged from multiple reputable sources, combined with my own research. Also, script-based utilities to help you c
  • pwn0sec/PwnChecker - Multi tool checker account validator 2020
  • mazen160/Firefox-Security-Toolkit - A tool that transforms Firefox browsers into a penetration testing suite
  • l4yton/RegHex - A collection of regexes for every possbile use
  • pry0cc/axiom - The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
  • GnosticPlayers/Solr-GRAB - Steal Apache Solr instance Queries with or without a username and password.
  • speed47/spectre-meltdown-checker - Spectre, Meltdown, Foreshadow, Fallout, RIDL, ZombieLoad vulnerability/mitigation checker for Linux & BSD
  • x1mdev/ReconPi - ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.
  • six2dez/reconftw - reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
  • ItsMeLBoy/AWCREC - Amazon Credentials Checker
  • GONZOsint/WhatCMS - CMS Detection and Exploit Kit based on Whatcms.org API
  • greycatz/CloudUnflare - Reconnaissance Real IP address for Cloudflare Bypass
  • mansoorr123/wp-file-manager-CVE-2020-25213 - https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8
  • aahmad097/BlackBird - Subdomain Enumeration and Scanner
  • Cyb0r9/Config-Exploiter - Config-Exploiter Dump config.php file from joomla and wordpress websites
  • TheSpeedX/SDorker - SuperDorker gives you a huge list of websites for 0day attacks from Google Dorks
  • himanshub16/ProxyMan - Configuring proxy settings made easy.
  • RightToPrivacy/MACcleaner - New continually changing MAC spoofer concept to thwart trackers; randomizes mac address at random times) prevents WIFI access point location tracking/MAC change patterns, permanent mac setting include
  • mmtrt/notepad-plus-plus - Unofficial snap repo for notepad-plus-plus snap
  • Winetricks/winetricks - Winetricks is an easy way to work around problems in Wine
  • peterpt/eternal_scanner - An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
  • DenizParlak/Zeus - AWS Auditing & Hardening Tool
  • DenizParlak/hayat - Hayat is a script for report and analyze Google Cloud Platform resources.
  • projectzeroindia/CVE-2019-19781 - Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]
  • tomdev/teh_s3_bucketeers -
  • abdulr7mann/hackerEnv -
  • dazdaz/gcs - Program shows how easy it is to use the Google Custom Search Engine from the command line
  • prowler-cloud/prowler - Prowler is an Open Source security tool to perform AWS security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains more than 2
  • danielebailo/couchdb-dump - Bash command line scripts to dump &restore a couchdb database
  • apache/couchdb-pkg - Apache CouchDB Packaging support files
  • SilverPoision/Rock-ON - Rock-On is a all in one Recon tool that will just get a single entry of the Domain name and do all of the work alone.
  • HightechSec/git-scanner - A tool for bug hunting or pentesting for targeting websites that have open .git repositories available in public
  • NullArray/NetSet - Operational Security utility and automator.
  • Shiva108/WAES - CPH:SEC WAES: Web Auto Enum & Scanner - Auto enums website(s) and dumps files as result
  • IvanGlinkin/Fast-Google-Dorks-Scan - The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread f
  • jakewmeyer/Geo - 🌎 A Bash utility for easy wan, lan, router, dns, mac address, and geolocation output, with clean stdout for piping
  • HiroshiManRise/anonym8 - Sets Transparent proxy tunnel through Tor, I2P, Privoxy, Polipo and modify DNS; Include Anonymizing Relay Monitor (arm), macchanger and wipe (Cleans ram/cache & swap-space) features, ID spoofing has n
  • proxycannon/proxycannon-ng - A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference
  • flexingonlamers/Mirai-Auto-Setup - MiraiBotnet Auto setup Script, Easy to use shell menu i created for a select amount of people, decided to release it
  • jgamblin/MacOS-Maid - Shell Script I Use To Automatically Clean Up My Mac.
  • mgeeky/dirbuster - wfuzz, SecLists and john -based dirbusting / forceful browsing script intended to be used during web pentest assingments
  • 21y4d/nmapAutomator - A script that you can run in the background!
  • isacikgoz/gogh-to-tilix - Generates popular themes from https://github.com/Mayccoll/Gogh for the https://github.com/gnunn1/tilix terminal emulator.
  • kennyn510/wpa2-wordlists - A collection of wordlists dictionaries for password cracking
  • mrzool/nordvpn-server-find - Find the fastest NordVPN servers from the command line, filtering by location and current server load
  • zerobyte-id/SEcraper - Search engine scraper tool with BASH script.
  • m3n0sd0n4ld/uDork - uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find IoT devices, detect versions of web applications,
  • aryanrtm/KawaiiDeauther - Jam all wifi clients/routers.
  • mbadolato/iTerm2-Color-Schemes - Over 250 terminal color schemes/themes for iTerm/iTerm2. Includes ports to Terminal, Konsole, PuTTY, Xresources, XRDB, Remmina, Termite, XFCE, Tilda, FreeBSD VT, Terminator, Kitty, MobaXterm, LXTermin
  • Hackplayers/4nonimizer - A bash script for anonymizing the public IP used to browsing Internet, managing the connection to TOR network and to different VPNs providers (OpenVPN)
  • esc0rtd3w/wifi-hacker - Shell Script For Attacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2)
  • meoso/wigle2kml - WiGLE.net to KML converter in BASH
  • BlackArch/torctl - Script to redirect all traffic through tor network including dns queries for anonymizing entire system
  • 1N3/BruteX - Automatically brute force all services running on a target.
  • 1N3/Findsploit - Find exploits in local and online databases instantly
  • 1N3/Goohak - Automatically Launch Google Hacking Queries Against A Target Domain
  • 1N3/Sn1per - Attack Surface Management Platform | Sn1perSecurity LLC
  • arismelachroinos/lscript - The LAZY script will make your life easier, and of course faster.
  • toniblyx/my-arsenal-of-aws-security-tools - List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
  • zardus/ctf-tools - Some setup scripts for security research tools.
  • Cignoraptor-ita/cignotrack - OSINT tool for testing privacy and social engineering vulnerability of organizations.
  • Viralmaniar/I-See-You - ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary re
  • Mi-Al/WiFi-autopwner - WiFi-autopwner: script to automate searching and auditing Wi-Fi networks with weak security
  • staz0t/hashcatch - Capture handshakes of nearby WiFi networks automatically
  • nahamsec/lazyrecon - This script is intended to automate your reconnaissance process in an organized fashion
  • Cyb0r9/SocialBox - SocialBox is a Bruteforce Attack Framework [ Facebook , Gmail , Instagram ,Twitter ] , Coded By Belahsan Ouerghi
  • tehw0lf/airbash - A POSIX-compliant, fully automated WPA PSK PMKID and handshake capture script aimed at penetration testing
  • mikhbur/conformer - Password Guessing for different Web Portals
  • v1s1t0r1sh3r3/airgeddon - This is a multi-use bash script for Linux systems to audit wireless networks.
  • OneLogicalMyth/hashcat-scripts - A collection of scripts I use with hashcat
  • streaak/pastebin-scraper - Pastebin-scraper tool leverages the API of https://psbdmp.ws/ to find emails/domains dumped in pastebin.
  • hamvocke/dotfiles - A collection of my personal dotfiles
  • KALILINUXTRICKSYT/easysploit - EasySploit - Metasploit automation (EASIER and FASTER than EVER)
  • screetsec/Sudomy - Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting
  • screetsec/Dracnmap - Dracnmap is an open source program which is using to exploit the network and gathering information with nmap help. Nmap command comes with lots of options that can make the utility more robust and dif
  • trimstray/sandmap - Nmap on steroids. Simple CLI with the ability to run pure Nmap engine, 31 modules with 459 scan profiles.
  • bcapptain/dockernymous - A script used to create a whonix like gateway/workstation environment with docker containers.
  • KeepWannabe/Remot3d - Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors
  • wuseman/EMAGNET - Automated hacking tool that will find leaked databases with 97.1% accurate to grab mail + password together from recent uploads from https://pastebin.com. Bruteforce support for spotify accounts, inst
  • Und3rf10w/kali-anonsurf - A port of ParrotSec's stealth and anonsurf modules to Kali Linux
  • angristan/wireguard-install - WireGuard VPN installer for Linux servers
  • brainfucksec/kalitorify - Transparent proxy through Tor for Kali Linux OS
  • screetsec/Vegile - This tool will setting up your backdoor/rootkits when backdoor already setup it will be hidden your spesisifc process,unlimited your session in metasploit and transparent. Even when it killed, it will

Smarty

TypeScript

Vala

  • teejee2008/timeshift - System restore tool for Linux. Creates filesystem snapshots using rsync+hardlinks, or BTRFS snapshots. Supports scheduled snapshots, multiple backup levels, and exclude filters. Snapshots can be resto

Visual Basic

Visual Basic .NET

  • Are-s-h/GovCracker - GovCracker is the best Wrapper and GUI for Hashcat, John the Ripper, PRINCE, Maskprocessor, Wordlister, CUPP, etc.
  • X-SLAYER/Website-Cloner - It allows you to download a website from the Internet to a local directory, building recursively all directories, getting HTML, images, and other files from the server to your computer.
  • UnamSanctam/SilentXMRMiner - A Silent (Hidden) Monero (XMR) Miner Builder

Vue

YARA

License

CC0

To the extent possible under law, Astrogeorgeonethree has waived all copyright and related or neighboring rights to this work.

About

A curated list of my GitHub Stars

Resources

Readme

License

CC0-1.0 license
Activity

Stars

1 star

Watchers

1 watching

Forks

1 fork
Report repository

Releases

No releases published

Packages

No packages published

Contributors 2

  •  
  •