13ughunter Goto Github PK

android-vulnerability-mining

Android APP漏洞之战系列，主要讲述如何快速挖掘APP漏洞

aptnotes

Various public documents, whitepapers and articles about APT campaigns

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

awesome-bugbounty-builder

Awesome Bug bounty builder Project

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

bug-bounty-beginner-roadmap

This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.

bug-bounty-labs

All the labs in this repository simulate real world bugs I found in the wild

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbounty11

RepoToStoreBugBountyInfo

burpsuite-for-pentester

cherrybomb

Stop half-done API specifications! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by validating your API specifications.

domainrecon

Based on URL and Organization Name, collect the IP Ranges, subdomains using various tools like Amass, subfinder, etc.. And check for uphost and Run Masscan to grap CNAME entries, take the screenshot of all the found subdomains using WebScreeShot and more...

drawio-desktop

Official electron build of draw.io

evplayer2crack

EV加密播放器2 反录屏、截图破解

fdict

一款面向企业的渗透测试字典生成工具。

gtfobins.github.io

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

h4cks

Combination of all my Resources, Links & Scripts

hackreport

渗透测试报告/资料文档/渗透经验文档/安全书籍

katana

A next-generation crawling and spidering framework.

m0chan.github.io

m0chan.github.io

mind-maps

Mind-Maps of Several Things

networksecurityself-study

这是作者的系列网络安全自学教程，主要是关于网安工具和实践操作的在线笔记，希望对大家有所帮助，学无止境，加油。

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

red-team-links

2019年红队资源链接，资源不是本人整理出来，来自互联网，因为流传的少，特意在此做个备份，做个分享。

secgen

Create randomly insecure VMs

tbhm

The Bug Hunters Methodology

trufflehog

Find credentials all over the place