raytheon0x21

practical-bug-bounty

A Django web application for curating Bug Bounty educational Videos

bypass-bot-detection

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

badsecrets

A library for detecting known secrets across many web frameworks

gmapsapiscanner

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

http-parser-inconsistency

Exploit POC of HTTP Parsers Inconsistency

gourlex

Gourlex is a simple tool that can be used to extract URLs and paths from web pages.

symfony-exploits

Exploits targeting Symfony

duplicut

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

h2spacex

HTTP/2 Single Packet Attack low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

knoxnl

This is a python wrapper around the amazing KNOXSS API by Brute Logic

ffufPostprocessing

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

cook

A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

bbot

A recursive internet scanner for hackers.

server-side-prototype-pollution

A collection of Server-Side Prototype Pollution gadgets and exploits

mantra

「🔑」A tool used to hunt down API key leaks in JS files and pages

Bypass-Reset-Password-Code-Lead-to-Account-Takeover

Bypass Reset Password Code Lead to Account Takeover

fuzzing

This repository provides several payloads for the web application fuzzing process, each of which has a different payload

csprecon

Discover new target domains using Content Security Policy

favirecon

Use favicon.ico to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

burpsuite-js-extractor

A simple plugin to export JS files from one or multiple targets

CVE-2024-23897

CVE-2024-23897

PortAuthority

A handy systems and security-focused tool, Port Authority is a very fast Android port scanner. Port Authority also allows you to quickly discover hosts on your network and will display useful network information about your device and other hosts.

cve

Gather and update all available and newest CVEs with their PoC.

watchtower

A process for automating Docker container base image updates.

31-days-of-API-Security-Tips

This challenge is Inon Shkedy's 31 days API Security Tips.

web.Monitor

Fast & user-friendly web change tracking tool.