fariqfgi

Immunefi-bug-bounty-writeups-list

curation of all(most) immunefi bug bounty writeups I could find(till now)

theHarvester

E-mails, subdomains and names Harvester - OSINT

wordfence-cli

Wordfence malware and vulnerability scanner command line utility.

wrongsecrets

Vulnerable app with examples showing how to not use secrets

CrackMapExec

A swiss army knife for pentesting networks

blutter

Flutter Mobile Application Reverse Engineering Tool

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

xsshunter

php-jpeg-shell

Simple PHP webshell with a JPEG header to bypass weak image verification checks

APK-FiD

Give me your APK, I will give you framework name

Command-Mobile-Penetration-Testing-Cheatsheet

Mobile penetration testing android & iOS command cheatsheet

Android-Protection-Bypass-Stuff

Android Protection Bypass Stuff that I compiled from few resources.

chatgpt-google-extension

This project is deprecated. Check my new project ChatHub:

HackTheBox-Cheatsheet

HackTheBox Cheatsheet I usually use.

vuln-nodejs-app

Warming-Up-Gemastik-2022

CVE-2022-41852

CVE-2022-41852 Proof of Concept (unofficial)

scscanner_sh

scscanner is tool to read website status code response from the lists.

BugBountyTemplates

A collection of templates for bug bounty reporting

dProgBb

Detect Program Bug Bounty

match-replace-burp

Useful "Match and Replace" burpsuite rules

CVE-2022-0847-DirtyPipe-Exploit

A root exploit for CVE-2022-0847 (Dirty Pipe)

jekyll-klise

:beach_umbrella: Klisé is a minimalist Jekyll theme for running a personal site or blog, light & dark mode support. (https://klise.vercel.app)

uro

declutters url lists for crawling/pentesting

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Bug-Hunting-Arsenal

The Repository contains various payloads, tools, tips and tricks from various hackers around the world. Please take a quick look down here 👇👇

cve

Gather and update all available and newest CVEs with their PoC.

notify

Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

nuxt-env

Tools for Dump NUXT JS Environment Config Through Browser Window Object

CVE-2021-4034

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)