jeremybuis

httpbin

HTTP Request & Response Service, written in Python + Flask.

cve

Gather and update all available and newest CVEs with their PoC.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

security-study-plan

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

phpggc

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Checklists

Red Teaming & Pentesting checklists for various engagements

HackVault

A container repository for my public web hacks!

writeups

RedTeaming_CheatSheet

Pentesting cheatsheet with all the commands I learned during my learning journey. Will try to to keep it up-to-date.

Auto_Wordlists

awesome-gpt-prompt-engineering

A curated list of awesome resources, tools, and other shiny things for GPT prompt engineering.

tactical-exploitation

Modern tactical exploitation toolkit.

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

xsleaks

A collection of browser-based side channel attack vectors.

ditto

A tool for IDN homograph attacks and detection.

whonow

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

jwt-secrets

OSWE

OSWE Preparation

samlists

Free, libre, effective, and data-driven wordlists for all!

godnslog

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

chomp-scan

A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.

waf-community-bypasses

GCP-IAM-Privilege-Escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

CVE-Reverse

threat-modeling-training

Segment's Threat Modeling training for our engineers

Bug-Bounty-Tips

A collection of notes, checklists, writeups on bug bounty hunting and web application security.

bugbounty

All Things Bug Bounty

jsyang