myuyu

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

owasp-mastg

The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

OneForAll

OneForAll是一款功能强大的子域收集工具

android-security-awesome

A collection of android security related resources

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

AwesomeXSS

Awesome XSS stuff

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

pentest-tools

A collection of custom security tools for quick needs.

Bug-bounty

Ressources for bug bounty hunting

wordlists

Automated & Manual Wordlists provided by Assetnote

XSS-Payloads

List of XSS Vectors/Payloads

bhg

Code samples for No Starch Press Black Hat Go

leonids

A simple, fixed sidebar two columns Gatsby.js blog starter.

aem-hacker

XSSTRON

Electron JS Browser To Find XSS Vulnerabilities Automatically

whonow

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

qsfuzz

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

bash_scripting

bash scripting thing!

h1passets

List HackerOne private program assets

maravel-permissions

Because in the Maravelous univer every user deserves super power

dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.

Android-Vulnerabilities

Covers Top 10 OWASP Mobile Vulnerabilities

CTF

My CTF writeups

shania

Scan secrets from Continuous Integration Build Logs

Reconizer

BB-SH-B

writeups

Enums

Just lists of lists of lists !