streaak

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

pastebin-scraper

Pastebin-scraper tool leverages the API of https://psbdmp.ws/ to find emails/domains dumped in pastebin.

hacks

Small snippets and scripts which I use

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

github-search

Tools to perform basic search on GitHub.

hackpad

A web application hacker's toolbox. Base64 encoding/decoding, URL encoding/decoding, MD5/SHA1/SHA256/HMAC hashing, code deobfuscation, formatting, highlighting and much more.

hacks-1

A collection of hacks and one-off scripts

CRLF-Injection-Scanner

Command line tool for testing CRLF injection on list of domains.

ffmpeg-avi-m3u-xbin

OSINT-Framework

OSINT Framework

oxml_xxe

A tool for embedding XXE/XML exploits into different filetypes

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

SubOver

A Powerful Subdomain Takeover Tool

CRLF-Injection-Payloads

Payloads for CRLF Injection

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

APAC-Conferences

A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.

certasset

Takes ip range, Scan all open SSL Certs, Grab Cnames

h1-212-ctf-solutions

A collection of the solutions people wrote for the H1-212 Capture The Flag event

heartbleed-poc

Test for SSL heartbeat vulnerability (CVE-2014-0160)

ICU

An Extended, Modulair, Host Discovery Framework

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

java_deserialization_exploits

A collection of Java Deserialization Exploits

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

AndroidPinning

A standalone library project for certificate pinning on Android.

assetnote-poc

(Proof of concept) push notifications for passive DNS data

gen_report

A quick, customizeable report generator for HackeOne. Increases productivity & efficiency.

gifoeb

exploit for ImageMagick's uninitialized memory disclosure in gif coder