Resources
OWASP Favicon DB: https://wiki.owasp.org/index.php/OWASP_favicon_database
Find Sites Tech Stack: https://www.wappalyzer.com/
Fuff, Fast Fuzzer: https://github.com/ffuf/ffuf
Command Injection Cheatsheet: https://github.com/payloadbox/command-injection-payload-list
File Format Magic Numbers: https://en.wikipedia.org/wiki/List_of_file_signatures
List of MiME Media Types: https://www.iana.org/assignments/media-types/media-types.xhtml
BurpSuite Extensions
This is a GitHub Infoshare that lists a ton of useful burp suite extensions https://github.com/snoopysecurity/awesome-burp-extensions
Web Recon
URL Gatherer: https://github.com/hakluke/hakrawler
Find attack surfaces: https://github.com/michenriksen/aquatone
Http probe: https://github.com/tomnomnom/httprobe
Check valid sites httpx: https://github.com/projectdiscovery/httpx
Asset Discovery: [https://github.com/OWASP/Amass]
Site Rep and info: https://urlscan.io/
Last updated