lafanachy Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

awesome-red-teaming

List of Awesome Red Teaming Resources

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugcrowd_university

Open source education content for the researcher community

burp

google-ctf

Google CTF

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

image

lafanachy.github.io

nahamsec-bugbounty

Nahamsec's BugBounty Repo

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

payload

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

portswigger-labs

A collection of solutions for every PortSwigger Academy Lab (in progress)

redteam-tactics-and-techniques

Red Teaming Tactics and Techniques

scripts

Kullanılabilir Scriptler

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sslpinning2

web-pentesting-checklist

checklist for testing the web applications

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

zonetransfer.sh

Zone Transfer Bash Script