0xmaruf

Config files for my GitHub profile.

0xmaruf.github.io

ably-js

Javascript, Node, Typescript, React Native client library SDK for Ably realtime messaging service

all-about-apikey

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

apk-penetration-testing-guide

The Android Penetration Testing Steps repository is intended for security professionals, penetration testers, developers, and anyone who is interested in understanding the security implications of Android devices. We encourage feedback, suggestions, and contributions from the community to help us keep this repository up-to-date and useful.

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

awesome-cybersecurity-handbooks

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more

awesome-mobile-ctf

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.

awesome-rce-techniques

Awesome list of techniques to achieve Remote Code Execution on various apps!

awesome-web-security

🐶 A curated list of Web Security materials and resources.

bash-oneliner

A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

blind-xss-payloads

bug-bounty-methodology-tuhin1729

These are my checklists which I use during my hunting.

bypass-vpn-and-real-location

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloud-security-attacks

Azure and AWS Attacks

csrf-poc-gen-burp-extensions

ctf-tools

Some setup scripts for security research tools.

cve

Gather and update all available and newest CVEs with their PoC.

cyrex

A minimal, responsive, and powerful Jekyll theme for presenting professional writing.

d4rkxss

A list of useful payloads and Bypass for Web Application Security and Bug Bounty/CTF

dependency-confusion

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

dependency-confusion-rce-poc

dom-xss-vulnable-code-and-exploit

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

dutch-gov-2023-scope-lists

ejpt-cheatsheet

This is a Cheatsheet for eJPT.