patuuh

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

HBSQLI

Automated Tool for Testing Header Based Blind SQL Injection

AllAboutBugBounty

All about bug bounty (bypasses, payloads, and etc)

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

offsec-tools

Compiled tools for internal assessments

ReconScan

Network reconnaissance and vulnerability assessment tools.

cve

Gather and update all available and newest CVEs with their PoC.

CVE-2021-4034

Offensive-Resources

A Huge Learning Resources with Labs For Offensive Security Players

calc_security_poc

A sample of proof of concept scripts that run Calc.exe with full source code.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

AutoSUID

AutoSUID application is the Open-Source project, the main idea of which is to automate harvesting the SUID executable files and to find a way for further escalating the privileges.

sliver

Adversary Emulation Framework

bypass-firewalls-by-DNS-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

git-wild-hunt

A tool to hunt for credentials in github wild AKA git*hunt

LinkFinder

A python script that finds endpoints in JavaScript files

RegHex

A collection of regexes for every possbile use

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

CVE-2021-1675

C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527