edoardottt

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Discover new target domains using Content Security Policy

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

Little Bug Bounty & Hacking Tools⚔️

TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.

Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

Advanced Client-Side Prototype Pollution Scanner

Notes I took while preparing for eJPT certification by INE Security (passed 19/20, fka eLearn Security)

List of companies that hire security people full remote.

List of 9500 (and counting) Spark AR Creators. Open an issue or contact me if you want to be added.❤️

🏴‍☠️ tools (py3 version) of Black Hat Python book 🏴‍☠️

Generate customized Password/Passphrase wordlist based on target information

🔒command line tool checking password safety🔒

Master of Science in Cybersecurity, Sapienza University of Rome.

CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions.

CompTIA Security+ SY0-601 notes (passed 788 points)

Like and retweet your tweets, or search tweets by topic. It stores and serves data with a Flask webapp. 🐦 Live demo running on twitter.com/ai_testing

Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more