a-PC-a-PC-a-PC

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

commix

Automated All-in-One OS Command Injection Exploitation Tool.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

awesome-hacker-search-engines

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

BurpSuite-For-Pentester

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

google-dorks

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

katana

A next-generation crawling and spidering framework.

xray

一款完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

cent

Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one place

chatgpt-prompts-bug-bounty

ChatGPT Prompts for Bug Bounty & Pentesting

chatgpt-google-extension

This project is deprecated. Check my new project ChatHub:

Red_Team

Some scripts useful for red team activities

SecurityTips

uro

declutters url lists for crawling/pentesting

metabigor

OSINT tools and more but without API key

Awesome-Bugbounty-Writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

Adversary3

Malware vulnerability intel tool for third-party attackers.

skanuvaty

Dangerously fast DNS/network/port scanner

Cheatsheets

Helped during my OSCP lab days.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

CVE-2022-29464

WSO2 RCE (CVE-2022-29464) exploit and writeup.

Bug-Bounty-Roadmaps

Bug Bounty Roadmaps

Android-Reports-and-Resources

A big list of Android Hackerone disclosed reports and other resources.