s41n1k Goto Github PK

hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

infoooze

Infoooze is an Open-source intelligence (OSINT) tool in NodeJs. It provides various modules that allow efficient searches.

inql

InQL - A Burp Extension for GraphQL Security Testing

ipsourcebypass

This Python script can be used to bypass IP source restrictions using HTTP headers.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

jfrog-cve-2022-21449

kexkill

Proof of concept for CVE-2016-8858

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

knowledgesharing

Bug Bounty Learning Public | Secret

leaklooker

Find open databases with Shodan

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

lilly

Tool to find the real IP behind CDNs/WAFs like cloudflare using passive recon by retrieving the favicon hash. For the same hash value, all the possible IPs, PORTs and SSL/TLS Certs are searched to validate the target in-scope.

logmap

Log4j jndi injection fuzz tool

mapcidr

Small utility program to perform multiple operations for a given subnet/CIDR ranges.

mind-maps

Mind-Maps of Several Things

mkpath

Make URL path combinations using a wordlist

mobile-nuclei-templates

msdorkdump

Google Dork File Finder

my-presentation-slides

Collections of Orange Tsai's public presentation slides.

netblocktool

Find netblocks owned by a company

nthim

Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!

nuclei-templates

i will upload more templates here to share with the comunity.

nuclei-templates-collection

Nuclei Templates Collection

onelistforall

Rockyou for web fuzzing wordlist

pentest

:no_entry: offsec batteries included

poc

Proof of Concepts

poc-1

Advisories, proof of concept files and exploits that have been made public by @pedrib.

poc-exploits

Select proof-of-concept exploits for software vulnerabilities to aid in identifying and testing vulnerable systems.