SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

✭ 301

learning hacking pentesting bugbounty appsecurity

jsleak

a Go code to detect leaks in JS files via regex patterns

✭ 111

go security scanner bugbounty

YAPS

Yet Another PHP Shell - The most complete PHP reverse shell

✭ 35

PHP backdoor reverse-shell exploit hacking netcat web-shell penetration-testing rat pentesting bugbounty pentest ctf-tools netcat-reverse pentest-tool webhacking reverse-tcp pentest-script cve-2021-4034

Resources

No description or website provided.

✭ 38

osint scanner phishing xss resources sql-injection bugbounty honey honey-pots

aquatone

A Tool for Domain Flyovers

✭ 43

javascript go HTML security osint hacking penetration-testing bug-bounty infosec pentesting bugbounty pentest appsec hacking-tool security-tools reconnaissance

AndroidSecNotes

An actively maintained, Self curated notes related to android application security for security professionals, bugbounty hunters, pentesters, reverse engineer, and redteamers.

✭ 140

android security adb notes hacking pentesting bugbounty androidsecurity

Pentesting

Misc. Public Reports of Penetration Testing and Security Audits.

✭ 24

security security-audit exploit poc vulnerability infosec pentesting security-vulnerability bugbounty pentest infosec-reference infosec-guideline

authz0

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

✭ 248

go Dockerfile security auth authorization bugbounty security-scanner golang-application authz security-tools

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

✭ 507

security fuzzing recon nuclei bugbounty pentest dirsearch security-tools dirbuster ffuf

targets

A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

✭ 85

python security information cybersecurity infosec recon bugbounty security-tools reconnaissance

Eagle

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

✭ 85

python ftp hacking xss bugbounty cve takeover bugcrowd ssrf hackerone

Domainker

BugBounty Tool

✭ 40

python crawler code checker injection hacking subdomain rce response bugbounty struts2 bb hacking-tool bugcrowd hackerone h1 sudomains

anewer

anewer appends lines from stdin to a file if they don't already exist in the file. This is a rust version of https://github.com/tomnomnom/anew

✭ 46

rust cli tool stdout bugbounty uniq stdin

PastebinMarkdownXSS

XSS in pastebin.com and reddit.com via unsanitized markdown output

✭ 84

security pastebin xss vulnerability infosec pentesting bugbounty

frida setup

One-click installer for Frida and Burp certs for SSL Pinning bypass

✭ 47

javascript shell android adb bug-bounty pentesting bugbounty frida reconnaissance hacking-tools pentesting-tools

reconness-agents

Reconness Agents Script

✭ 25

Dockerfile scripts recon bugbounty agents

fresh.py

An efficient multi-threaded DNS resolver validator

✭ 80

python shell dns bugbounty

pentesting-dockerfiles

Pentesting/Bugbounty Dockerfiles.

✭ 148

Dockerfile python shell docker dockerfile pentesting bugbounty hacking-tool pentest-tool redteam

BugHunter

No description or website provided.

✭ 23

PHP HTML CSS javascript Vue cors laravel management bug bugreport bugbounty clickjacking bughunter bugtool

nuubi

Nuubi Tools (Information-ghatering|Scanner|Recon.)

✭ 76

python osint scanner recon bugbounty hackertarget informasion-ghatering

T1tl3

A simple python script which can check HTTP status of branch of URLs/Subdomains and grab URLs/Subdomain title

✭ 14

python infosec bugbounty whitehat

HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

✭ 1,210

api checklist security web webapp pentesting writeups bugbounty pentest websecurity api-security bugbountytips bugbounty-writeups

osmedeus-workflow

Community Workflow for the Osmedeus Engine that describes basic reconnaissance methodology for you to build your own

✭ 26

infosec recon bugbounty osmedeus

ldapconsole

The ldapconsole script allows you to perform custom LDAP requests to a Windows domain.

✭ 25

python search ldap active-directory pentesting bugbounty

ksubdomain

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

✭ 320

go subdomain bugbounty hacker-tools

hack-pet

🐰 Managing command snippets for hackers/bug bounty hunters. with pet.

✭ 77

go snippets tool hacking pet bugbounty bugbountytips command-line-manager

Payloads

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

✭ 421

PHP java Classic ASP ASP.NET powershell perl penetration-testing bugbounty payload payloads payloads-database bugbounty-tool

CVE-2021-44228-PoC-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks

✭ 760

java security exploit log4j hacking cybersecurity poc pentesting writeups bugbounty cve pentest payload red-team bugbounty-writeups security-writeups cve-2021-44228 bugbounttips cve-2021-45046 cve-2021-45105

hinject

Host Header Injection Checker

✭ 64

go penetration-testing bugbounty

VulWebaju

VulWebaju is a platform that automates setting up your pen-testing environment for learning purposes.

✭ 53

shell hacking penetration-testing pentesting bugbounty hacktoberfest owasp-top-10

daily-commonspeak2

commonspeak2 subdomains wordlist generated daily **DEPRECATED** The author(s) of commonspeak2 maintain an official repo with more lists. Please use it instead: https://github.com/assetnote/wordlists

✭ 38

security bugbounty content-discovery

Galaxy-Bugbounty-Checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

✭ 34

bug bugs bugbounty ethical-hacking red-team bugcrowd hackerone red-teaming bugbountytips bugbounty-tool bugbountytricks bugbounty-reports ethical-hacker bugbounty-checklist

SubWalker

Simultaneously execute various subdomain enumeration tools and aggregate results.

✭ 26

shell recon bugbounty subdomain-enumeration

webapp-wordlists

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

✭ 306

python shell wordpress cms application web drupal typo3 version pentesting bugbounty content-management-system wordlists

gwdomains

sub domain wild card filtering tool

✭ 38

go hacking infosec bugbounty

recce

Domain availbility checker

✭ 30

python shell bugbounty information-security information-gathering domain-discovery subdomain-scanner subdomain-enumeration

OffensiveCloudDistribution

Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.

✭ 86

HCL shell security recon bugbounty scanning redteam

vapi

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

✭ 674

HTML PHP Blade api docker cors owasp postman exercises bugbounty appsec hacktoberfest vulnerable-application owasp-top-10 owasp-top-ten appsec-tutorials apitop10 hacktoberfest-accepted

Reconky-Automated Bash Script

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

✭ 167