anindya14

waf-bypass

Check your WAF before an attacker does

AllForOne

AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,

ReconAIzer

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

CTF

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

OSCP-note

awesome-bugbounty-builder

Awesome Bug bounty builder Project

OneListForAll

Rockyou for web fuzzing

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

BugBountyBooks

A collection of PDF/books about the modern web application security and bug bounty.

CTF_Writeups

snmp

SNMP data gather scripts

Penetration_Testing_POC

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Caparser

A quick and dirty PCAP parser that helps you identify who your applications are sending sensitive data to without encryption.

Raspberri-pi

Pentest-Cheatsheets

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

pwncat

pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

impacket

Impacket is a collection of Python classes for working with network protocols.

Checklists

Red Teaming & Pentesting checklists for various engagements

monkey

Infection Monkey - An open-source adversary emulation platform

json-interop-vuln-labs

Companion labs to "An Exploration of JSON Interoperability Vulnerabilities"

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

diodb

Open-source vulnerability disclosure and bug bounty program database

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

routeros

RouterOS Security Research Tooling and Proof of Concepts

r2ghidra

Native Ghidra Decompiler for r2

Exploits_and_Advisories

Repository that tracks public exploits, vulnerabilities and advisories that I [co-]discovered or [co-]authored.

PoC

Advisories, proof of concept files and exploits that have been made public by @pedrib.

FirmAE

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities