danishongithub Goto Github PK

awesomexss

Awesome XSS stuff

blazy

Blazy is a modern login bruteforcer which also tests for CSRF, Clickjacking, Cloudflare and WAF .

danishongithub

Config files for my GitHub profile.

demo-ghas

dvwa

Damn Vulnerable Web Application (DVWA)

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

ghas-policy-as-code

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

takeover

Sub-Domain TakeOver Vulnerability Scanner

test1

test2

vulnerableapp

OWASP VulnerableApp Project: For Security Enthusiasts by Security Enthusiasts.

vulpy

Vulnerable Python Application To Learn Secure Development

waybackurls

Fetch all the URLs that the Wayback Machine knows about for a domain