ahmedzer011

API-SecurityEmpire

API Security Project aims to present unique attack & defense methods in API Security field

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Tricks-Web-Penetration-Tester

Web Application Penetration Testing

penetration-testing-cheat-sheet

Work in progress...

announcements

Subscribe to this repo to be notified of Announcements and changes in .NET Core.

AwesomeXSS

Awesome XSS stuff

Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning

One-Liner-Collections

This Repositories contains list of One Liners with Descriptions and Installation requirements

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

tbhm

The Bug Hunters Methodology

offensive-bookmarks

A collection of bookmarks for penetration testers, bug bounty hunters, malware developers, reverse engineers and anyone who is just interested in infosec topics.

Mind-Maps

Mind-Maps of Several Things

Priv8-Nuclei-Templates

My Priv8 Nuclei Templates

wafw00f

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

PhoneSploit-Pro

An all-in-one hacking tool to remotely exploit Android devices using ADB and Metasploit-Framework to get a Meterpreter session.

Munge

a password munger inspired by https://github.com/Th3S3cr3tAg3nt/Munge

cupp

Common User Passwords Profiler (CUPP)

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

GitTools

A repository with 3 tools for pwn'ing websites with .git repositories available

SpiderSuite

Advance web security spider/crawler

nucleitemp

get all nuclei temp from emad shanab repo in one run

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

Awesome-WAF

🔥 Web-application firewalls (WAFs) from security standpoint.

recon-resource

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

nomore403

Tool to bypass 403/40X response codes.

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Fast-Google-Dorks-Scan

The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

Vulnerable-Code-Snippets

A small collection of vulnerable code snippets

vulnerable-code-snippets

Twitter vulnerable snippets