root0x1a Goto Github PK

asyncrat-c-sharp

Open-Source Remote Administration Tool For Windows C# (RAT)

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbountytoolkit

A multi-platform bug bounty toolkit that can be installed on Debian/Ubuntu or setup with Docker.

ctf_writeups

My Write-ups for Various CTF's

cve-2017-8759

Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

facebook-bug-bounty-write-ups

Hunting Bugs for Fun and Profit

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

rsactftool

RSA attack tool (mainly for ctf) - retreive private key from weak public key and/or uncipher data

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sish

An open source serveo/ngrok alternative. HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH.

test

uacme

Defeating Windows User Account Control

xmlrpwn

Wordpress XMLRPC toolkit for pentesters