mud1t

DevSecOps-Playbook

This is a step-by-step guide to implementing a DevSecOps program for any size organization

zsh-aliases

Aliases and scripts to make common tasks easier.

confused

Tool to check for dependency confusion vulnerabilities in multiple package management systems

Dorks-collections-list

List of Github repositories and articles with list of dorks for different search engines

Awesome-RCE-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

simple-bash-scripts

A collection of simple Bash scripts

SourceCodeReview

Source Code Review resources for Bug Bounty Hunters & Developers. This Repo is updated consistently.

match-replace-burp

Useful "Match and Replace" burpsuite rules

container-hardening

scripts which help harden containers

Electro-XSS

Electro-XSS , a buggy desktop app developed with the Electron framework.

BurpSuite-Xkeys

A Burp Suite Extension to extract interesting strings (key, secret, token, or etc.) from a webpage.

MicroBurst

A collection of scripts for assessing Microsoft Azure security

awesome-cloud-security

🛡️ Awesome Cloud Security Resources ⚔️

CertificationMaterials

A collection of materials related to my certification videos

DevSecOps

Ultimate DevSecOps library

payloads

i will add payloads here for dos or crasshing the apps

ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

all-about-apikey

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

OSCE3-Complete-Guide

OSWE, OSEP, OSED, OSEE

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

docs

documentations, slides decks...

x8

Hidden parameters discovery suite

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

pentest_diary

SerializedPayloadGenerator

Parsia-Clone

Clone me and get your own authentic Parsia-Clone today.

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

HopLa

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite