Mahmoud Azam's starred repositories
CheatSheetSeries
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
h4cker
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
awesome-osint
:scream: A curated list of amazingly awesome OSINT
personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024
trufflehog
Find, verify, and analyze leaked credentials
Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
awesome-infosec
A curated list of awesome infosec courses and training resources.
KingOfBugBountyTips
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
bounty-targets-data
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
OneListForAll
Rockyou for web fuzzing
pentest-guide
Penetration tests guide based on OWASP including test cases, resources and examples.
zen-rails-security-checklist
Checklist of security precautions for Ruby on Rails applications.
API-s-for-OSINT
List of API's for gathering information about phone numbers, addresses, domains etc
git-all-secrets
A tool to capture all the git secrets by leveraging multiple open source git searching tools
non-typical-OSINT-guide
The most unusual OSINT guide you've ever seen. The repository is intended for bored professionals only. PRs are welcome!
offensive-bookmarks
A collection of bookmarks for penetration testers, bug bounty hunters, malware developers, reverse engineers and anyone who is just interested in infosec topics.
ohshint.gitbook.io
So what is this all about? Yep, its an OSINT blog and a collection of OSINT resources and tools. Suggestions for new OSINT resources is always welcomed.
bug-bounty-platforms
A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.
Golden-Guide-for-Pentesting
Golden Guide
Priv8-Nuclei-Templates
My Priv8 Nuclei Templates
private_templates
Private Nuclei Templates
Security-Research
This repository contains proof of concept for zero days and CVEs that were found by Omar Hashem through Security Research
The-Nen-Book
The Nen Book is a list of personal notes and tips collected from a lot of recourses in different categories like: WebApp Security, API Security, Cloud Security, Network Pentesting, Code Review, Threat Hunting.