ramosslyz Goto Github PK

pentest_note

渗透测试常规操作记录

php-audit-labs

一个关于PHP的代码审计项目

pi-hole-blocklists

picker

poc

Proofs-of-concept

poc-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

poc-exp

poc-jt

PoC. Severity critical.

posta

🐙 Cross-document messaging security research tool powered by https://enso.security

postlook

The Postlook Scanner is a powerful tool designed to scan the Postman website and identify publicly exposed critical company information. It leverages techniques to search for sensitive data that may have been unintentionally made public on the Postman platform.

postmaniac

Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces

postmessage-tracker

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

postmessagehook

by Gary O'Leary-Steele | cloned from https://sentinel.appcheck-ng.com/static/pm/logger.html

pp-finder

PP-finder Help you find gadget for prototype pollution exploitation

ppchecker

Yet another prototype pollution checker tool

ppfuzz

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

practical-recon-levelup0x02

This repository contains all the material from the talk "Practical recon techniques for bug hunters & pentesters" given at Bugcrowd LevelUp 0x02 virtual conference

presentations

priv8-nuclei-templates

My Priv8 Nuclei Templates

private-nuclei-templates

private_templates

Private Nuclei Templates

program-db

Gold

prsnltmpl

public-bugbounty-data

Recon Data for public bug bounty sites useful for searching new CVE's. Quick Bounty.

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

public-nuclei-templates

public-pentesting-reports

Curated list of public penetration testing reports released by several consulting firms

pwnctl

a recon framework that facilitates discovering, scanning and monitoring assets trough a configurable engine running on serverless aws infrastructure.

pwngodb

PwngoDB is a simple Python script that checks whether a list of MongoDB URLs are accessible or not.