who-ami Goto Github PK

1u.ms

50m_ctf_writeup

$50 Million CTF from Hackerone - Writeup

afl-training

Exercises to learn how to fuzz with American Fuzzy Lop

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

am0n-eye

android_security

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

asnmap

Go CLI and Library for quickly mapping organization network ranges using ASN information.

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-redteam

一个红队知识仓库

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

brevityrecon

broken-link-checker

Find broken links, missing images, etc within your HTML.

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

burpsuite-plugins-usage

Burpsuite-Plugins-Usage

byob

An open-source post-exploitation framework for students, researchers and developers.

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

c0devari4nt

A variant analysis and visualisation tool that scans codebases for similar vulnerabilities

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

cf

Cloud Exploitation Framework 云环境利用框架，方便红队人员在获得 AK 的后续工作

cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

command-injection-payload-list

🎯 Command Injection Payload List

csprecon

Discover new target domains using Content Security Policy

csrf-poc-generator

this html file creates a csrf poc form to any http request.

cyberchef

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

databouncing

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️