eraymitrani

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

SundayStreams

Data from my Sunday streams

awesome-cve-poc

✍️ A curated list of CVE PoCs.

off-by-slash

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

pentest_compilation

Compilation of commands, tips and scripts that helped me throughout Vulnhub, Hackthebox, OSCP and real scenarios

bugbountywiki

The Bug Bounty Wiki

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

pentest-management

Simple webinterface combining different recon tools.

mass3

CVE-2018-0296

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.

Awesome-Hacking

A collection of various awesome lists for hackers, pentesters and security researchers

CloudScraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

ShellPop

Pop shells like a master.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

aquatone

A Tool for Domain Flyovers

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

gifoeb

exploit for ImageMagick's uninitialized memory disclosure in gif coder

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Fruits-vs-Veggies

zaproxy

The ZAP core project

Episodes

Source Code from episodes of AlwaysBCoding screencasts

umich-eecs545-lectures

This repository contains the lecture materials for EECS 545, a graduate course in Machine Learning, at the University of Michigan, Ann Arbor.