muhammadfaizan92 Goto Github PK

awesome-waf

🔥 Web-application firewalls (WAFs) from security standpoint.

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

bug-bounty-methodology

These are my checklists which I use during my hunting.

credzcheckr

Testing default web credentials

cve-2020-4463

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability (CVE-2020-4463)

cve-2024-24919-bulk-scanner

CVE-2024-24919 [Check Point Security Gateway Information Disclosure]

cve-2024-25600

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

cve-2024-36991

POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.

directory-traversal-payloads

List of Directory Traversal/LFI Payloads Scraped from the Internet

dome

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

gmapsapiscanner

graphql-cop

Security Auditor Utility for GraphQL APIs

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

img-payloads

ityfuzz

Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts

leaked-credentials

how to look for Leaked Credentials !

leaky-paths

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

muhammadfaizan92

Config files for my GitHub profile.

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

one-liner-collections

This Repositories contains list of One Liners with Descriptions and Installation requirements

onedorkforall

An insane list of all dorks taken from everywhere from various different sources.

payloads

pdf-exploit

POC Pdf-exploit builder on C#

pdfexploits

this repo contains all types of pdf exploits..

python-for-awae

Python for AWAE (Advanced Web Attacks and Exploitation)

socialhunter

crawls the website and finds broken social media links that can be hijacked

spyhunt

recon for bug hunters

sqlisniper

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers