muhaprime Goto Github PK

403bypasser

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

awesome-hacker-note-taking

Awesome note-taking apps for hackers & pentesters !

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-web-security

🐶 A curated list of Web Security materials and resources.

bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

breach-parse

A tool for parsing breached passwords

bruteforce-lists

Some files for bruteforcing certain things.

bucky

Bucky (An automatic S3 bucket discovery tool)

bug-bounty-toolz

BBT - Bug Bounty Tools

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugforaging

This repo includes my analysis of some public reports.

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

checklists

Red Teaming & Pentesting checklists for various engagements

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

dome

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

github-search

Tools to perform basic search on GitHub.

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

imsi-catcher

This program show you IMSI numbers of cellphones around you.

inputscanner

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

keywords

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

mod0burpuploadscanner

HTTP file upload scanner for Burp Proxy

mstg-hacking-playground

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.