0x076d's repositories
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
230-OOB
An Out-of-Band XXE server for retrieving file contents over FTP.
android-security-awesome
A collection of android security related resources
Androl4b
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
awesome-android-security
A curated list of Android Security materials and resources For Pentesters and Bug Hunters
Awesome-RCE-techniques
Awesome list of step by step techniques to achieve Remote Code Execution on various apps!
Bug-Bounty-Beginner-Roadmap
This is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.
Ciphey
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
ghsec-jaeles-signatures
Signatures for jaeles scanner by @j3ssie
Hack-Night
Hack Night is an open weekly training session run by the OSIRIS lab.
hedgedoc
HedgeDoc - The best platform to write and share markdown.
HowToHunt
Tutorials and Things to Do while Hunting Vulnerability.
httprobe
Take a list of domains and probe for working HTTP and HTTPS servers
IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
KingOfBugBountyTips
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
learnjavabug
Java安全相关的漏洞和技术demo，原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security Manager绕过、Dubbo-Hessian2安全加固等等实践代码。
lpeworkshop
Windows / Linux Local Privilege Escalation Workshop
Nuclei-bug-hunter
Nuclei
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
OneListForAll
Rockyou for web fuzzing
OSCP-Cheatsheet
OSCP Cheatsheet
pentest-guide
Penetration tests guide based on OWASP including test cases, resources and examples.
PENTESTING-BIBLE
Updates to this repository will continue to arrive until the number of links reaches 10000 links & 10000 pdf files .Learn Ethical Hacking and penetration testing .hundreds of ethical hacking & penetration testing & red team & cyber security & computer science resources.
PentestTraining_2
PentestTraining_2
quack
Quack Toolkit is a set of tools to provide denial of service attacks. Quack Toolkit includes SMS attack tool, HTTP attack tool and many other attack tools.
tengo
A fast script language for Go
webshell
This is a webshell open source project
windows-kernel-exploits
windows-kernel-exploits Windows平台提权漏洞集合