thatpham Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

android-security-teryaagh

Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

bug-bounty-tools

The tools I have programmed to help me with bugbounty's

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbountystuff

Stuff for bug bounty

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA (no need /usr/sbin/sendmail)

cve

Gather and update all available and newest CVEs with their PoC.

cve-2021-3129_exploit

Exploit for CVE-2021-3129

exphub

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

githubleakalert

golden-guide-for-pentesting

Golden Guide

google-dorks-bug-bounty

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

mind-maps

Mind-Maps of Several Things

pentest-cheat-sheets

A collection of snippets of codes and commands to make your life easier!

portswigger-websecurity-academy

Writeups for PortSwigger WebSecurity Academy

powershdll

Run PowerShell with rundll32. Bypass software restrictions.

pwn_jenkins

Notes about attacking Jenkins servers

reflutter

Flutter Reverse Engineering Framework

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

ssrfmap

Automatic SSRF fuzzer and exploitation tool

uforall

UForAll is a fast url crawler this tool crawl all URLs number of different sources, alienvault,WayBackMachine,urlscan,commoncrawl

villain

Villain is a Windows & Linux backdoor generator and multi-session handler that allows users to connect with sibling servers (other machines running Villain) and share their backdoor sessions, handy for working as a team.

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose