abd-4fg Goto Github PK

quick-pocs-templetes

Proof of concept code for vulnerabilities

rayder

A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows

recon_methodology

recon from myerspective

redirect-fuzzer

Fuzzing script for redirect URL validator

reresolve_vps_files

reResolve_vps_files

rescro

regular expression extractor for webpages

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

sdto-realworld-subdomains

A repository to host the subdomain wordlists from my blog https://medium.com/@nynan/what-i-learnt-from-reading-217-subdomain-takeover-bug-reports-c0b94eda4366

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sherlock

🔎 Hunt down social media accounts by username across social networks

sslenum

Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)

ssrfexploit

Extract metadata with SSRF (Server-Side Request Forgery)

subdomain-takeover-signatures

subenum

bash script for Subdomain Enumeration

subenum_deep_subdomain_enumeration

In this repo, I have created a subdomain enumeration function that grab subdomains in deep.

subtocheck

subdomain takeover checker

summery-of-web-app-hacker-s-handbook

The Web Application Hacker's Handbook - Extra Content

thecyberguy_recon_v1.0

methadology sample

top-burpsuite-plugins-extensions

Burp plugins

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

tracker-radar

Data set of top third party web domains with rich metadata about them

vault_bugbounty

veshraj.github.io

Assignments

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

vulnerable-oauth-2.0-applications

vulnerable OAuth 2.0 applications: understand the security implications of your OAuth 2.0 decisions.

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

webhacking

WebHacking checklist

wheretogo

WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find entry points to the organization data.

wordlists

Real-world infosec wordlists, updated regularly

wp-vulnerabilities-exploits

Huge Collection of Wordpress Exploits and CVES