patuuh

Payloads-and-wordlists

List of payloads for BurpSuite intruder. Payloads gathered from Swisskyrepos PayloadsAllTheThings

Depcher

Tool to quickly analyze bug bounty platforms targets by checking their technology stack with wappalyzer and running Vulners scan to the found technologies

Cache-CheckeR

Script that scans urls for their use of caching methods. For future cache poisoning matters

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

CVE-2023-28121

WooCommerce Payments: Unauthorized Admin Access Exploit

HBSQLI

Automated Tool for Testing Header Based Blind SQL Injection

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

navgix

navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities

SimpleTradeFollower

Follows predefined trader and makes it's own stock purchases in sandbox environment based on the trader

patuuh.github.io

PrintNightmare-CVE-2021-1675

Impacket implementation of CVE-2021-1675

shortscan

An IIS short filename enumeration tool

SimpleInstagramBotCreator

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources