arunsaw Goto Github PK

a-full-list-of-wordlists

this contain the burp pack

alovoa

Free and open-source dating platform that respects your privacy

ascii-c-game

Small shooter write in C/Ncurses

awesome-burp-suite

Awesome Burp Suite Resources. 400+ open source Burp plugins, 500+ posts and videos.

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-malware-development

Organized list of my malware development resources

awesome-network-stuff

Resources about network security, including: Proxy/GFW/ReverseProxy/Tunnel/VPN/Tor/I2P, and MiTM/PortKnocking/NetworkSniff/NetworkAnalysis/etc。More than 1700 open source tools for now. Post incoming.

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-reverse-engineering

Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

awesome-reversing

A curated list of awesome reversing resources

bingoo

BinGoo! A Linux bash based Bing and Google Dorking Tool

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

bypass-web-application-firewalls

Bypassing-Web-Application-Firewalls-And-XSS-Filters A series of python scripts for generating weird character combinations and lists for BurpSuite Pro for bypassing web application firewalls (WAF) and XSS filters. These python scripts have been created to fuzz wierd combinations: URL Escape Characters HTML Escape Characters Binary Characters These scripts were created during an assessment, while trying to bypass a Web Application Firewall (WAF) in order to exploit a XSS vulnerability. Differnt webservers and browsers interpret URL and strange characters differently which could lead to the bypassing of security controls. When I tried to send a > or < character the WAF would block the request. The following URL escapes I have noticed are traslated to < > ' by Apache2 based web servers: %(N%(n%)S%)U%)^%)s%)u%*C%*E%*c%*e%,.%.#%1N%1n%2S%2U%2^%2s%2u%3C%3E%3c%3e%5.%7#%:C%:E %:c%:e%HN%Hn%IS%IU%I^%Is%Iu%JC%JE%Jc%Je%L.%N#%XN%Xn%YS%YU%Y^%Ys%Yu%ZC%ZE%Zc%Ze%.%^# %hN%hn%iS%iU%i^%is%iu%jC%jE%jc%je%l.%n#%xN%xn%yS%yU%y^%ys%yu%zC%zE%zc%ze%|

cheat.sh

the only cheat sheet you need

cmsmap

CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.

cmsscan

CMS Scanner: Scan Wordpress, Drupal, Joomla, vBulletin websites for Security issues

command-injection-payload-list

🎯 Command Injection Payload List

customheader

This Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, Proxy History)

cybersecurity-resources

Cybersecurity Resources

devops-roadmap

DevOps Roadmap for 2024. with learning resources

dsa-bootcamp-java

This repository consists of the code samples, assignments, and the curriculum for the Community Classroom complete Data Structures & Algorithms Java bootcamp.

ebookfoundation-free-programming-books

facebook-bug-bounty-write-ups

Hunting Bugs for Fun and Profit

fuxploider

File upload vulnerability scanner and exploitation tool.

hackbar

HackBar plugin for Burpsuite v1.0

hackers-grimoire

My pen testing notes

hacking-security-ebooks

Top 100 Hacking & Security E-Books (Free Download)

hacking-windows

A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.

idiomatic.js

Principles of Writing Consistent, Idiomatic JavaScript

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool