CharanRayudu

Damn-Vulnerable-RESTaurant-API-Game

Damn Vulnerable Restaurant is an intentionally vulnerable Web API game for learning and training purposes dedicated to developers, ethical hackers and security engineers.

burpgpt

A Burp Suite extension that integrates OpenAI's GPT to perform an additional passive scan for discovering highly bespoke vulnerabilities and enables running traffic-based analysis of any type.

bb-reports-templates

My small collection of reports templates (This is a fork of orignal repo from https://github.com/gwen001/BB-datas)

GoCloud

Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare

Bug-Bounty-Tips

A collection of notes, checklists, writeups on bug bounty hunting and web application security.

BurpShiroPassiveScan

一款基于BurpSuite的被动式shiro检测插件

AutoSUID

AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges.

RedTeam-OffensiveSecurity

Tools & Interesting Things for RedTeam Ops

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

ato-checklist

A checklist of practices for organizations dealing with account takeover (ATO)

Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

phpbash

A semi-interactive PHP shell compressed into a single file.

awesome-vulnerable-apps

Awesome Vulnerable Applications

Nuclei-Templates-Collection

Nuclei Templates Collection

XXE_A_TO_Z

pwn_jenkins

Notes about attacking Jenkins servers

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

sd-goo

Enumerate Subdomains Through Google Dorks

31-days-of-API-Security-Tips

This challenge is Inon Shkedy's 31 days API Security Tips.

Bug-Bounty-Roadmaps

Bug Bounty Roadmaps