abd-4fg Goto Github PK

burpparamflagger

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

cname

CNAME records lookup

cve-2019-1579

Plato Alto Global Protect Unauthenticated RCE

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

easyg

Here I gather all the resources about hacking that I find interesting

ec2-start-stop

This script is used to automatically start/stop ec2 instance to match target ip in aws ip pool to takeover subdomain..

galaxy-bugbounty-checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

gasset

Passive subdomains enumeration

gcpshardjuggler

A tool to aid in DNS Takeovers for Google Cloud [Possibly fixed]

github

github-dorks

Useful Github Dorks for BugBounty -

google-dorks

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

howtohunt

Bug bounty bugs guide

inventory

Asset inventory on public bug bounty programs.

jsnotify

jspector

A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

kenzerdb

automated bug hunting with kenzer

keyhacks.sh

Automation of tokens/api keys testing.

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

linkedint

LinkedIn Recon Tool

mind-maps

Mind-Maps of Several Things

mynuclei_templates

my nuclei templates

n0kovo_subdomains

An extremely effective subdomain wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

notes

nuclei-bug-hunter

i will upload more templates here to share with the comunity.