sbzo Goto Github PK

brutesubs

An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks.

community-scripts

A collection of ZAP scripts provided by the community - pull requests very welcome!

csrf-request-builder

dcipher

Decipher hashes using online rainbow & lookup table attack services.

gobuster

Directory/file & DNS busting tool written in Go

gwdomains

sub domain wild card filtering tool

hacks

A collection of hacks and one-off scripts

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hunt

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

java-deserialization-scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

nmap-vulners

NSE script based on Vulners.com API

packetstorm-exploits

Collection of publicly available exploits from Packetstorm

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-tools

Custom pentesting tools

recon.sh

A toolset to track and organize output of reconnaissance tools

ripgrep

ripgrep recursively searches directories for a regex pattern

sh00t

Security Testing is not as simple as right click > Scan. It's messy, a tough game. What if you had missed to test just that one thing and had to regret later? Sh00t is a highly customizable, intelligent platform that understands the life of bug hunters and emphasizes on manual security testing.

sncrawler

A web crawler written with pentesting in mind and some hacks for smart crawling

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

sublist3r

Fast subdomains enumeration tool for penetration testers

tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

vulnerable-code-snippets

Twitter vulnerable snippets

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.