0xmaximus

Galaxy-Bugbounty-Checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

final_freaking_nuclei_templates

hackerone-reports

Top disclosed reports from HackerOne

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

Poc

PoC collection of Atlassian(Jira, Confluence, Bitbucket) products and Jenkins, Solr, Nexus

Home-Demolisher

PoC for CVE-2021-31166 and CVE-2022-21907

HowToHunt

Tutorials and Things to Do while Hunting Vulnerability.

Weaponize-Your-Burp

Weaponize Your Burp is a repository for automation your Bug Bounty Hunting mindset in Burp Suite

Swagger

Apache-Commons-Text-CVE-2022-42889

Apache Text4Shell (CVE-2022-42889) Burp Bounty Profile

awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources

Awesome_Malware_Techniques

This is a repository of resource about Malware techniques

kxss

This a adaption of tomnomnom's kxss tool with a different output format

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

LoggerPlusPlus-API-Filters

A Collection of Logger++ Filters for Hunting API Vulnerabilities

Mail-Server-Attacks-Cheat-Sheet

A cheat sheet that contains common enumeration and attack methods for Mail Server.

Pentest_tools

Private-Nuclei-Templates

recon_methodology

recon from myerspective

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops

Shellcode-Hide

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

ssrf

this a ssrf scripts

teapot

recon/enum script for pen-testing

0xmaximus

CVE-2023-36003-POC

Privilege escalation using the XAML diagnostics API (CVE-2023-36003)

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

web-lab

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.