myuyu

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

PENTESTING-BIBLE

articles

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

OneForAll

OneForAll是一款功能强大的子域收集工具

android-security-awesome

A collection of android security related resources

AwesomeXSS

Awesome XSS stuff

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

pentest-tools

A collection of custom security tools for quick needs.

Bug-bounty

Ressources for bug bounty hunting

shuffledns

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

wordlists

Automated & Manual Wordlists provided by Assetnote

XSS-Payloads

List of XSS Vectors/Payloads

leonids

A simple, fixed sidebar two columns Gatsby.js blog starter.

aem-hacker

whonow

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

Command-Mobile-Penetration-Testing-Cheatsheet

Mobile penetration testing android & iOS command cheatsheet

websocket-smuggle

Issues with WebSocket reverse proxying allowing to smuggle HTTP requests

qsfuzz

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

bash_scripting

bash scripting thing!

maravel-permissions

Because in the Maravelous univer every user deserves super power

dr_robot

This tool can be used to enumerate the subdomains associated with a company by aggregating the results of multiple OSINT (Open Source Intelligence) tools.

Android-Vulnerabilities

Covers Top 10 OWASP Mobile Vulnerabilities

whoosh

[Prototype] Control a 3D spaceship with hand movements

CTF

My CTF writeups

alldomains

all domains and his subdoamins

shania

Scan secrets from Continuous Integration Build Logs

BB-SH-B

Enums

Just lists of lists of lists !

disco-data

Discovery data for various bug bounties