taku65maku Goto Github PK

1earn

暂停维护 | ffffffff0x 团队维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

acomplete-guide-to-dir-brute-force-admin-panel-and-api-endpoints

ato-checklist

A checklist of practices for organizations dealing with account takeover (ATO)

awesome-appsec

A curated list of resources for learning about application security

awesome-browser-exploit

awesome list of browser exploitation tutorials

awesome-hacker-api-tools

A collection of hacker tools using HackerOne's API

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

beanshooter

JMX enumeration and attacking tool.

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bug-bounty-platforms

A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-bounty-toolz

BBT - Bug Bounty Tools

ccs-calendarserver

The Calendar and Contacts Server.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

crawlergo

A powerful browser crawler for web vulnerability scanners

csp_security_mistakes

Cloud service provider security mistakes

cyfon

bug bounty pull all subdomain data, hacker tools

fuzzdicts

Web Pentesting Fuzz 字典,一个就够了。

fyi

My last 10 year's material collection on offensive & defensive security, GRC, risk management, technical security guidelines and much more.

getlevels

A small Python Script To get all levels of subdomains from a list

github.io

gup

gup aka Get All Urls parameters to create wordlists for brute forcing parameters.

hackerone-reports

Top disclosed reports from HackerOne

hacking_tools_cheat_sheet

hackingtool

ALL IN ONE Hacking Tool For Hackers

hakrawlerx8chain

joern

Open-source code analysis platform for C/C++/Java/Binary based on code property graphs

jok3r

Jok3r v3 BETA 2 - Network and Web Pentest Automation Framework

juice-shop

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application