foulenzer

foulenzer's starred repositories

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Language:PHPMIT54307 1899 256

CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Language:PythonCC-BY-SA-4.026749 574 423

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Language:C#NOASSERTION15090 226 179

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

10198 565 25

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Language:JavaScriptMIT8158 191 1408

awesome-incident-response

A curated list of tools for incident response

Apache-2.07180 457 14

monkey

Infection Monkey - An open-source adversary emulation platform

Language:PythonGPL-3.06507 241 1496

tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Language:CGPL-3.05977 188 942

HowToHunt

Collection of methodology and test case for various web vulnerabilities.

GPL-3.05618 271 16

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

CC-BY-SA-4.05587 236 5

WhatWeb

Next generation web scanner

Language:RubyGPL-2.05144 176 214

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

Language:PythonGPL-3.05018 61 73

AwesomeXSS

Awesome XSS stuff

Language:JavaScriptMIT4662 240 13

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

4585 106 65

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

CC0-1.04405 289 10

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Language:GoGPL-3.04257 58 103

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Language:GoMIT3347 54 294

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

MIT2999 2340

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

GPL-3.02383 109 1

Sooty

The SOC Analysts all-in-one CLI tool to automate and speed up workflow.

Language:PythonGPL-3.01289 63 64

wordlists

Automated & Manual Wordlists provided by Assetnote

Language:CSSApache-2.01182 24 4

bruteforce-lists

Some files for bruteforcing certain things.

Apache-2.01014 340

public-bugbounty-programs

Community curated list of public bug bounty and responsible disclosure programs.

Language:GoMIT976 49 25

AWAE-PREP

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

Language:Java834 390

OSWE

OSWE Preparation

540 22 3