n8zwn

pentestcheatsheets

Pentest Cheatsheets

BugBountyTools

Tools written in Go for BugBounty from Tomnomnom, OJ, proabiral and others inside of a docker image.

WAF-Stuff

A substitute repository put up on public demand for the original Awesome WAF repository (https://github.com/0xInfection/Awesome-WAF) which has been temporarily (10 days) taken down by GitHub.

.dotfiles

Dotfiles

awesome-web-security

🐶 A curated list of Web Security materials and resources.

HHVLabs

payloads

Git All the Payloads! A collection of web attack payloads.

pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

physical-docs

This is a collection of legal wording and documentation used for physical security assessments. The goal is to hopefully allow this as a template for other companies to use and to protect themselves when conducting physical security assessments.

security-cheatsheets

🔒 A collection of cheatsheets for various infosec tools and topics.

SSTI

tbhm

The Bug Hunters Methodology

template-injection-workshop

Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.

xxe-workshop

Workshop given at Hack in Paris 2019

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

dotfiles

.vimrc, .bashrc etc

open-pic-sure-bdc-frontend

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pic-sure-auth-microapp

microapp

pic-sure-bdc-frontend

pic-sure-hpds

pic-sure-search-prototype

public

stuff i'm willing to share with the world lol