ShreyalJ

blind_sqli

This script can be used to automate the process of exploiting blind SQL Injection to dump data

HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

FYI

My last 12 year's material collection on offensive & defensive security, GRC, risk management, technical security guidelines and much more.

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM and embedded RISC-V architectures.

tipjar

Awesome-Hacking-Resources

A collection of hacking / penetration testing resources to make you better!

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

keyFinder

Keyfinder🔑 is a tool that let you find keys while surfing the web!

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

GitHub-Recon

GitHub Recon — and what you can achieve with it!

awesome-oscp

A curated list of awesome OSCP resources

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

BrokenLinkHijacker

A Fast Broken Link Hijacker Tool written in Python

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

surferFTP

SSRF to TCP Port Scanning, Banner and Private IP Disclosure by abusing the FTP protocol/clients

REST_API

API research and learning

ground-control

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

XXEinjector

Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

changeme

A default credential scanner.

thc-hydra

hydra

datasploit

An #OSINT Framework to perform various recon techniques on Companies, People, Phone Number, Bitcoin Addresses, etc., aggregate all the raw data, and give data in multiple formats.

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

wfuzz

Web application fuzzer

xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.

Sn1per

Attack Surface Management Platform