3mr3-sec

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

ffuf

Fast web fuzzer written in Go

sanitizers

AddressSanitizer, ThreadSanitizer, MemorySanitizer

content

The content behind MDN Web Docs

osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

awesome-bugbounty-tools

A curated list of various bug bounty tools

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

RedEye

RedEye is a visual analytic tool supporting Red & Blue Team operations

exploitation-course

Offensive Software Exploitation Course

Galaxy-Bugbounty-Checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

inventory

Asset inventory of over 800 public bug bounty programs.

untrusted-types

solr-injection

Apache Solr Injection Research

SleuthQL

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

telegram_bot

A charismatic Ruby client for Telegram's Bot API

openfx-misc

Miscellaneous OFX / OpenFX / Open Effects plugins

bugbounty-targets

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms.

up-http-tool

Simple HTTP listener for security testing

book-1

Public-CTF

Collect public CTF source code repo

Reverse_Engineering_For_Beginners

Tutorial Reverse Engineering

payloadtester_lfi_rfi

LFI/RFI Payload Tests Project

astrolock

A purposely vulnerable application in order to demonstrate PHP payload smuggling techniques for PNG files.

Understanding_Linux_Kernel_Vulnerability

Understanding Linux Kernel Vulnerability

toxic-cookies

Tool for poisoning browser cookies of currently loaded domain

mutiny-fuzzer

uncover

Quickly discover exposed hosts on the internet using multiple search engines.

fuzzing-python-with-atheris