Ravindra-lakhara

AndroidSecNotes

Self curated notes related to android application security.

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

HowToHunt

Tutorials and Things to Do while Hunting Vulnerability.

pwn_jenkins

Notes about attacking Jenkins servers

PwnXSS

PwnXSS: Vulnerability (XSS) scanner exploit

theGreatRecon

4-ZERO-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

Awesome-Red-Team-Operations

CloudPentestCheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

CVE-2021-26855

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server. According to Orange Tsai, the researcher who discovered the vulnerabilities, CVE-2021-26855 allows code execution when chained with CVE-2021-27065 (see below). A successful exploit chain would allow an unauthenticated attacker to "execute arbitrary commands on Microsoft Exchange Server through only an open 443 port." More information and a disclosure timeline are available at https://proxylogon.com.

CVE-2021-26855-SSRF

This script helps to identify CVE-2021-26855 ssrf Poc

FuzzingTool

Software for fuzzing, used on web application pentestings.

Guide-to-SSRF

Guide to SSRF

HolyTips

Tips and Tutorials on Bug Bounty Hunting and Web Application Security.

KingOfBugBountyTips

learn365

This repo is about @harshbothra_ 365 days of learning Tweet & Mindmap collection

Penetration_Testing_POC

有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pexip

PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

security_resources

Collection of online security resources

vulnerability-rating-taxonomy

Bugcrowd’s baseline priority ratings for common security vulnerabilities

next-netlify-starter

petereport

PeTeReport is an open-source application vulnerability reporting tool.

subdomaintakeover

subdomaintakeover_ravi