blaCCkHatHacEEkr/PENTESTING-BIBLE
Leran Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
#awesome #awesome_list #bugbounty #csrf #cybersecurity #hacking #hacking_tool #kali_linux #linux #malware_analysis #mitm #osint #osint_resources #pentesting #redteam #resources #sql_injection #windows #xss #xxe
Stars: 110 Issues: 0 Forks: 23
https://github.com/blaCCkHatHacEEkr/PENTESTING-BIBLE

teknogeek/ssrf-sheriff
A simple SSRF-testing sheriff written in Go
Language: Go
#bugbounty #go #ssrf
Stars: 82 Issues: 0 Forks: 12
https://github.com/teknogeek/ssrf-sheriff

vaib25vicky/awesome-mobile-security
An effort to build a single place for all useful android and iOS security related stuff. All references and tools are belong to their respective owners. I'm just maintaining it.
#android #android_security #awesome #awesome_list #bugbounty #hacking #hacking_tools #ios #ios_security #malware #malware_research #mobile #mobile_security #pentesting #redteam #resources #reverse_engineering #security_tools
Stars: 110 Issues: 0 Forks: 11
https://github.com/vaib25vicky/awesome-mobile-security

projectdiscovery/naabu
A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests
Language: Go
#bugbounty #port_enumeration #portscanner #security_tools
Stars: 183 Issues: 3 Forks: 13
https://github.com/projectdiscovery/naabu

smodnix/31-days-of-API-Security-Tips
This challenge is Inon Shkedy's 31 days API Security Tips.
#api_pentest #api_security #bug_bounty #bugbounty #bugbountytips #infosec #pentest #security
Stars: 294 Issues: 0 Forks: 34
https://github.com/smodnix/31-days-of-API-Security-Tips

projectdiscovery/nuclei
Nuclei is a fast tool for configurable targeted scanning based on templates offering massive extensibility and ease of use.
Language: Go
#bugbounty #content_bruteforcing #content_discovery #infosec #pentest_tool #security #web
Stars: 139 Issues: 5 Forks: 22
https://github.com/projectdiscovery/nuclei

devanshbatham/ParamSpider
Mining parameters from dark corners of Web Archives
Language: Python
#bugbounty #content_discovery #fuzzing #osint #parameter #parameter_finder #urls_parameters
Stars: 241 Issues: 1 Forks: 50
https://github.com/devanshbatham/ParamSpider

devanshbatham/Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
Language: Python
#bugbounty #bugbounty_blogs #bugbounty_facebook #bugbounty_writeups #bugbounty_yahoo #bugbountytips #bughuntin_writeups #bughunting #bughunting_methodology #security_writeups
Stars: 247 Issues: 0 Forks: 44
https://github.com/devanshbatham/Awesome-Bugbounty-Writeups

devanshbatham/FavFreak
Making Favicon.ico based Recon Great again !
Language: Python
#bugbounty #bughunting #hacking #information_gathering #osint #recon #reconnaissance #web_security #webappsec
Stars: 125 Issues: 0 Forks: 31
https://github.com/devanshbatham/FavFreak

dwisiswant0/awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
#awesome #bash #bugbounty #bugbountytips #one_liners
Stars: 101 Issues: 0 Forks: 37
https://github.com/dwisiswant0/awesome-oneliner-bugbounty

utkusen/urlhunter
a recon tool that allows searching on URLs that are exposed via shortener services
Language: Go
#bugbounty #intelligence #osint #recon #security
Stars: 161 Issues: 2 Forks: 13
https://github.com/utkusen/urlhunter

ihebski/DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Language: Jupyter Notebook
#blueteam #bugbounty #cheatsheet #credentials_gathering #cybersecurity #default_password #infosec #pentest #pentesting #security
Stars: 167 Issues: 0 Forks: 22
https://github.com/ihebski/DefaultCreds-cheat-sheet

sickcodes/no-sandbox
No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox. TL;DR exploits in these browser based applications are already sandboxed escaped: https://no-sandbox.io/
#0day #bug #bugbounty #chrome #chromium #exploit #rce #research
Stars: 91 Issues: 2 Forks: 8
https://github.com/sickcodes/no-sandbox

Puliczek/CVE-2021-44228-PoC-log4j-bypass-words
🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches
Language: Java
#bugbounttips #bugbounty #bugbounty_writeups #cve #cve_2021_44228 #cybersecurity #exploit #hacking #log4j #payload #pentest #pentesting #red_team #security #security_writeups #writeups
Stars: 191 Issues: 0 Forks: 38
https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words

Puliczek/awesome-list-of-secrets-in-environment-variables
🦄🔒 Awesome list of secrets in environment variables 🖥️
#blue_team #bugbounttips #bugbounty #cve_2021_44228 #cybersecurity #exploit #log4j #pentesting #poc #red_team #security #security_writeups #writeups
Stars: 139 Issues: 0 Forks: 9
https://github.com/Puliczek/awesome-list-of-secrets-in-environment-variables