abd-4fg Goto Github PK

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC 该项目将不断更新

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

ars0n-framework

A Modern Framework for Bug Bounty Hunting

autoall-main

automations of different bug types

automate-telegram

connect VPS to output on telegram chats directly.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesomexss

Awesome XSS stuff

bash-oneliner

A collection of handy Bash One-Liners and terminal tricks for data processing and Linux system maintenance.

bash-recon

[+] bash recon

bash-scripting-recon

Power of .bashrc and .bash_aliases

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

blind-xss-svg

Blind XSS with SVG IMG - POC

bounty-monitor

Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty

checklists

bug-bounty-resources

Here Are Some Bug Bounty Resource From Twitter

bug-bounty-testing-essential-guideline-startup-bug-hunters

Bug Bounty Testing Essential Guideline : Startup Bug Hunters

bug_bounty_notes

A collection of notes for bug bounty hunting

bugbounty

bugbounty-1

Bugbounty Resources

bugbounty-2

All Items Related to bug bounty

bugbounty-3

RepoToStoreBugBountyInfo

bugbounty-wordlist

Real world bug bounty wordlists

bugbounty_changelogs

bugbountydorks

This repo contains all the Bug Bounty Dorks sourced from different awesome sources and compiled at one place. Hunt for Programs varying from Private VDP Programs to Blockchain Programs.

burp-1.7-version

BetterBugBounty - Here tools are classic, bugs are hunted, and nostalgia is the ultimate weapon!

burpparamflagger

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones