awesomeaakash

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

bugcrowd_university

Open source education content for the researcher community

jaeles

The Swiss Army knife for automated Web Application Testing

BBTz

BBT - Bug Bounty Tools (examples💡)

subdomain3

A new generation of tool for discovering subdomains( ip , cdn and so on)

content-type-research

Content-Type Research

HTTP-Smuggling-Lab

Use HTTP Smuggling Lab to learn HTTP Smuggling.

Wordlists

Various Payload wordlists

XSSCon

XSSCon: Simple XSS Scanner tool

auth_analyzer

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

whoxyrm

A reverse whois tool based on Whoxy API.

blue_eye

Blue Eye is a python Recon Toolkit script. It shows ports and headers. Subdomain resolves to the IP addresses, company email addresses and much more ..! Author: Jolanda de Koff

ghsec-jaeles-signatures

Signatures for jaeles scanner by @j3ssie

awesome-bug-bounty-tips

A curated list of amazingly bug bounty tips from security researchers around the world.

vulnsearch

A deep look at some recon methodologies and web-application vulnerabilities of my interest where I will merge all my notes gathered from books, videos, articles and own experience with bug bounty hunting / web and network hacking

crt.sh

A shell script to grab subdomains from https://crt.sh, and probe for working http and https servers with @tomnomnom's tool https://github.com/tomnomnom/httprobe

autofindomain

secrets

Offsec Pentest and Bug Bounty Notes

bug_bounty_tweets

bash_script_templates

Some Templates for Bash Scripting

Notes

hackmaster9000

hack faster with hackmaster9000

cname-check

Check if the subdomains have cnames to the same tld or 3rd party service

shoping_site

dummy shopping site for whitebox pentestig

hackerone_wordlist

The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform

hyperecon

recon setup + automation

My-WebSec-Notes

Some notes (tips/tricks) gathered by me during time related to web pentesting, bug bounty and browser/tools stuff.

BountyNotes

A Noob's Journey in the Realm of Bugs