Hi 👋 My name is Crystal Mercier

Security Consultant

I am passionate about Cyber Security and my goal is to give back to this amazing community by sharing the best resources that I come across or build myself on my own learning journey.

🖥️ See my portfolio at cmmercier.github.io

Skills

Socials

Badges

My GitHub Stats

cmmercier's Projects

awesome-waf

🔥 Everything about web-application firewalls (WAF).

breach-parse

A tool for parsing breached passwords

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

hugo-toha.github.io

An example hugo static site with Toha theme.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

mfasweep

A tool for checking if MFA is enabled on multiple Microsoft Services

owasp-testing-checklist

OWASP based Web Application Security Testing Checklist is an Excel based checklist which helps you to track the status of completed and pending test cases.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poc

Advisories, proof of concept files and exploits that have been made public by @pedrib.

pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️