hisxo Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

awesome-xss-payloads

Exotic and uncommon XSS Vectors to hit the target as quickly as possible.

bb-datas

Tools and datas related to bug bounty programs.

bb-legal-fr

Quelques conseils autour des obligations légales, fiscales et juridique pour la pratique du Bug Bounty en France

best-readme-template

An awesome README template to jumpstart your projects!

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

encrypter-metasploit

gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

github-search

Tools to perform basic search on GitHub.

harp

Static Site Server/Generator with built-in preprocessing

jspector

A simple Burp Suite extension to crawl JavaScript (JS) files in passive mode and display the results directly on the issues

log4j2-cve-2021-44228

Remote Code Injection In Log4j

markdown-xss-payloads

XSS payloads for exploiting Markdown syntax

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

open-redirect-payloads

Open Redirect Payloads

payloadsallthethings

recon-raven

Reconnaissance tool of Penetration test & Bug Bounty

reconaizer

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

regexapi

list of regex for apis

rengine

reNgine is an automated reconnaissance framework meant for gathering information during penetration testing of web applications. reNgine has customizable scan engines, which can be used to scan the websites, endpoints, and gather information.

scapy

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sundaystreams

Data from my Sunday streams

trufflehogregexes

These are the regexes that power truffleHog

wordlist

Wordlists for Bug Bounty

xss-payloads

List of advanced XSS payloads

xxe-study

This repository contains various XXE labs set up for different languages and their different parsers. This may alternatively serve as a playground to teach or test with Vulnerability scanners / WAF rules / Secure Configuration settings.