Henryharan

OWASP Amass v5.1.1 is out! Major performance improvements and smoother operation in production environments Existing Asset DB stores will need to be updated for v5.1.1 due to schema changes Docker Compose remains the easiest way to deploy #OWASP #Amass #OSINT #CyberSecurity

Claude Bug Bounty Hunter - Claude Code skill for AI-assisted bug bounty hunting - recon, IDOR, XSS, SSRF, OAuth, GraphQL, LLM injection, and report generation github.com/shuvonsec/clau…

Scanner - AI model safety scanner built on NVIDIA - github.com/0din-ai/ai-sca… An open-source web application for AI model security assessments, built with Ruby on Rails and NVIDIA garak. Scanner helps organizations test their AI systems for vulnerabilities before deployment, similar to penetration testing for traditional software. 1️⃣ 179 community probes across 35 vulnerability families, aligned with the OWASP LLM Top 10 2️⃣ Multi-target scanning — test API-based LLMs and browser-based chat UIs 3️⃣ Scheduled and on-demand scans with configurable recurrence 4️⃣ Attack Success Rate (ASR) scoring with trend tracking across scan runs 5️⃣ PDF report export with per-probe, per-attempt drill-down 6️⃣ SIEM integration — forward results to Splunk or Rsyslog 7️⃣ Multi-tenant — multiple organizations on a single deployment, data encrypted at rest 8️⃣ No artificial limits — all features unlocked, unlimited scans and users

Penetration Tester Agent - github.com/VoltAgent/awes… You are a senior penetration tester with expertise in ethical hacking, vulnerability discovery, and security assessment. Your focus spans web applications, networks, infrastructure, and APIs with emphasis on comprehensive security testing, risk validation, and providing actionable remediation guidance. #PenetrationTesting #EthicalHacking #VulnerabilityAssessment #AppSec #CyberSecurity #PentestAgent

🚀 CyScan.io v2 just dropped. Completely rebuilt from scratch for threat intel analysts and security researchers. New engine. New features. Still free. Forever. Here's what changed 🧵👇

Ashok: A OSINT Recon Tool GitHub: github.com/powerexploit/A… Features: ▪️Wayback Crawler Machine ▪️Google Dorking without limits ▪️Github Information Grabbing ▪️Subdomain Identifier ▪️Cms/Technology Detector With Custom Headers

This is a username tool on steroids. @Chadi0x’s The Big Brother scans 473 plus platforms for matching usernames. It pulls profile images and runs quad engine reverse image searches automatically. Check it out for username + image intel in one workflow. github.com/chadi0x/TheBig…

@Mostlykohli @grok the statement is true?

This is the facility and hospitality provided to Pakistan cricket team in Colombo by Sri Lanka and ICC. It looks like they are coming out of a cement factory 😭🤣

PentestAgent - github.com/GH05TCREW/pent… PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows. -

Did you know you can run ngrok (without installing it) by using tunnel.us.ngrok.com as a reverse tunnel? Try this: ssh -R 80:localhost:80 tunnel.us.ngrok.com http It's the equivalent of `ngrok http 80`

reconFTW: A powerful automated reconnaissance tool designed for security researchers and penetration testers. GitHub: github.com/six2dez/reconf…

H4X-Tools: Open source toolkit for scraping, OSINT and more. GitHub: github.com/vil/H4X-Tools

@infinitelogins @spaceraccoon ZERODAY

To celebrate @spaceraccoon's new book launch, I’m giving away a copy of "From Day Zero to Zero Day" (it may be an ebook if I can’t ship). Comment ZERODAY below, and I’ll DM you the link to enter (Make sure your DMs are enabled so I can message you). Good luck! #BugBounty

Dork King is a free online tool that generates Google (Shodan, PublicWWW) dorks to search for various sensitive data, including: - Configuration files - Log files - Database files - PHPinfo - Installation/setup files - Subdomains - Login pages And many more. For more information, visit: dorkking.blindf.com #googledorks #cybersecurity #bugbounty

I post this website every once and a while because it's a good reminder that if you can't find a way to delete your account somewhere, this website will usually tell you how. justdeleteme.xyz

Red Team Certification🔥 - Comprehensive Notes & Cheat Sheet for Top-Notch Red Team Certifications🚀 🔗github.com/0xn1k5/Red-Tea…

Finally added the recon module! You can now perform more detailed reconnaissance on any target using data from multiple sources. Special thanks to @Karthik__hr and @madhusudan91263 for their contributions and for continuously helping improve it day by day. site: lostsec.xyz

PDFSearch.io Online tool for searching over 18 million PDF documents. One advantage over other document search engines is that the table of contents of the documents found is displayed right in the search results. #osint #searchengines

CBBH: A Hacker’s Guide to Web Exploits👾🔥 🔗savitar.gitbook.io/mynotes/certif…