encodedguy

bugbounty-cheatsheet

crash

Simple executable made in C to crash your PC.

oneliners

Collection of One Liners from Different Sources for Bug Bounty Automation

reconasha

Automate your subdomain enumeration, subdomain takeover, management, nuclei, etc. in one go.

parffuf

Fuzz many live hosts with ffuf in different modes

deflogin

Contains all default usernames and passwods for serveral web consoles.

Anonymous

rashahacks.com

Official code for rashahacks.com

rabbitmq-whoami

Python code to test default credentials for list of rabbitmq login dashboard

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

custom-wordlists

Will manage my custom wordlists here

Jeeves

Jeeves SQLI Finder

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-recon-dataset

recon data for public bug bounty programs. due to extreme abuse via automated tools & requests from multiple threat intelligence teams, this project has been archived & moved.

CVE-2022-22963

CVE-2022-22963 PoC

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

eb-python-flask

encodedguy

example-percy-puppeteer

Example app showing integration of Percy visual testing into Puppeteer tests.

H4sh

All about H4shing

hydrogenshop

hydrogenshopify

impacket

Impacket is a collection of Python classes for working with network protocols.

log4j-detect

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

Movie-Booking-System

pwn_jenkins

Notes about attacking Jenkins servers

rashahacks.com-new

Somethings which I cannot understand.

Spring4Shell-POC

Spring4Shell Proof Of Concept/Information CVE-2022-22965

tests-library

Community generated list of API security tests to find OWASP top10, HackerOne top 10 vulnerabilities