security-research

There are 19 repositories under security-research topic.

payloadbox / sql-injection-payload-list
🎯 SQL Injection Payload List
sql-injection attacker sql-injection-attacks sql-injection-proof sql-injection-exploitation sql-injections sql-injection-payloads injection-payloads sql-injection-filterer sql-injection-attack owasp-top-10 payloads payload websecurity bugbounty security-research hacking sql-inject injection-attacks injection
4313
payloadbox / command-injection-payload-list
🎯 Command Injection Payload List
command-injection injection security-vulnerability vulnerability payload-list payload os-injection command os unix linux windows macos application application-security bugbounty security security-research vulnerability-research security-testing
2649
sergey-pronin / Awesome-Vulnerability-Research
🦄 A curated list of the awesome resources about the Vulnerability Research
awesome awesome-list vulnerability-research curated reading-list fuzzing exploit-development security-research
1046
diodb
disclose / diodb
Open-source vulnerability disclosure and bug bounty program database
security-research safe-harbor-framework responsible-disclosure vulnerability-disclosure disclosure-policy simplicity legal safety bug-bounty hackers bug-bounty-hunters data
Language:Python 954
PentestPad / subzy
Subdomain takeover vulnerability checker
cybersecurity bugbounty security-vulnerability subdomain-takeover security-research
Language:Go 870
BishopFox / h2csmuggler
HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
bugbounty infosec security-research security-tools
Language:Python 612
LockGit / Hacking
Hacker, ready for more of our story ! 🚀
attack attacker attacks cracker geek hack hacker hacking hacking-tool poc scanner security security-research security-vulnerability tool tools vulnerabilities vulnerability vulnerability-scanners
Language:Python 521
shodansploit / shodansploit
🔎 shodansploit > v1.3.0
shodan shodan-api shodan-cli shodan-scripts shodan-tool shodan-tools shodan-client shodan-python python-shodan security security-tools security-testing intelligence python-script shodansploit security-research security-scanner security-automation
Language:Python 511
payloadbox / rfi-lfi-payload-list
🎯 RFI/LFI Payload List
rfi lfi rfi-exploiton lfi-exploitation lfi-vulnerability rfi-vulnerabillity websecurity appsec application-security web-application-security payload payloads payload-list bugbounty bug-bounty security security-research security-researcher security-researchers web-hacking
504
rarecoil / pantagrule
large hashcat rulesets generated from real-world compromised passwords
hashcat hashcat-rules password-cracking security-research passwords
382
security-cheatsheet / metasploit-cheat-sheet
Metasploit Cheat Sheet 💣
metasploit metasploit-framework metasploit-cheat-sheet security security-cheat-sheets exploit metasploit-framework-database metasploit-database exploitation-framework security-research security-testing rapid7 meterpreter msfvenom payload
369
ossf / fuzz-introspector
Fuzz Introspector -- introspect, extend and optimise fuzzers
fuzzing security testing vulnerability-analysis fuzz-testing security-research
Language:Python 347
security-checklist / php-security-check-list
PHP Security Check List [ EN ] 🌋 ☣️
php php-library php-framework security security-audit checklist security-checklist php-security php-security-checker webapplication web-application-security bugbounty security-research security-researcher web-application web-application-framework security-testing
292
lawndoc / jaws
Jaws is an invisible programming language! Inject invisible code into other languages and files! Created for security research -- see blog post
programming-language flex-bison compiler virtual-machine security-research malware-research interpreter interpreted-programming-language polyglot c-programming
Language:C 231
GaloisInc / MATE
MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs.
code-property-graph llvm program-analysis security security-research static-analysis symbolic-execution
Language:Python 170
lololosys / awesome-baseband-research
A curated list of awesome baseband research resources
shannon baseband vulnerability security-research
148
systrack
mebeim / systrack
📡🐧 Linux kernel syscall implementation tracker
linux linux-kernel security-research syscall syscall-table syscalls abi automation binary-analysis elf kconfig
Language:Python 122
fierceoj / ShonyDanza
A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.
shodan shodan-api shodan-python reconnaissance red-team blue-team purple-team scanning information-gathering shonydanza pre-configure exploits vulnerability-identification vulnerability-detection malware-identification malware-detection pentesting penetration-testing security-tools security-research
Language:Python 114
mirchr / security-research
Security Research
vulnerabilities exploit-code security-research
Language:Shell 94
linux-syscalls
mebeim / linux-syscalls
🌐🐧 Browsable linux kernel syscall tables built with Systrack (https://github.com/mebeim/systrack)
linux linux-kernel security-research security-tools syscall-table syscalls
Language:JavaScript 90
dyjakan / interpreter-bugs
Fuzzing results for various interpreters.
fuzzing bugs vulnerabilities security python ruby php hhvm interpreter security-research
Language:Ruby 79
lololosys / awesome_cisco_exploitation
A curated list of awesome Cisco exploitation resources
ios cisco exploitation source-code awesome awesome-list security cisco-exploitation security-research
67
Chocapikk / CVE-2023-6553
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
cve cybersecurity exploit hacking infosec php python rce security security-research vulnerability wordpress cve-2023-6553
Language:Python 64
Chocapikk / CVE-2023-4966
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
citrix cve-2023-4966 exploit exploitation infosec memory-leak netscaler network-security open-source pentesting python security security-research session-tokens vulnerability
Language:Python 61
disclose / dioterms
Open-source vulnerability disclosure policy templates.
vulnerability-disclosure vulnerability-disclosure-policies disclosure-policy responsible-disclosure security-research bug-bounty legal exemption disclosure safe-harbor-language boilerplate security
60
userlandkernel / ios-unstripped-kexts
Unstripped iOS kernel extensions and more. More coming soon.
ios rom kernel kext security-research
Language:Shell 54
Macmod / STARS
A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services that could possibly lead to subdomain takeover scenarios.
aws azure cloud cybersecurity dns gcp subdomain-takeover domain-takeover python security takeover infosec python3 security-research scanner subdomain digitalocean cloudflare pentesting security-tools
Language:Python 44
win3zz / Meta-Owned-IT-Assets
Curated list of Meta (formerly Facebook) owned IT assets
bug-bounty facebook meta reconnaissance security-research subdomains
44
omarhashem123 / Security-Research
This repository contains proof of concept for zero days and CVEs that were found by Omar Hashem through Security Research
0day cve security-research zero-days bypass
Language:Python 42
EnableSecurity / advisories
Security advisories published by Enable Security
security-research advisories
Language:Python 33
lololosys / cisco_ios_research
cisco-router ios security-research
Language:C 33
public-research
redcanaryco / public-research
Public repository for Red Canary Research
security-research security
Language:C 32
0dayInc / pwn
PWN is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.
automation reverse-engineering penetration-testing fuzzing reconnaissance web-security bugbounty security-tools devsecops penetration-testing-framework sast security-research vulnerability-scanning artificial-intelligence sdr telecom hardware-security telecom-security
Language:Ruby 30
captn3m0 / sanskari-proxy
A proxy for security researchers outside India to access Indian government websites without resorting to shady VPNs.
proxy india government security-research security-researcher geoblocking
30
feedhenry / mobile-security
FeedHenry Mobile Security
mobile-app mobile-security security-research android ios best-practices openid-connect secure-storage cordova templates
Language:JavaScript 29
r3k4t / phone-number-info
Phone-number-info is a Phone Number Information Gathering Tool.
python forensics-investigations forensic-analysis security-research security-testing software-engineering network-engineering software-development
Language:Python 24

security-research

payloadbox / sql-injection-payload-list

payloadbox / command-injection-payload-list

sergey-pronin / Awesome-Vulnerability-Research

disclose / diodb

PentestPad / subzy

BishopFox / h2csmuggler

LockGit / Hacking

shodansploit / shodansploit

payloadbox / rfi-lfi-payload-list

rarecoil / pantagrule

security-cheatsheet / metasploit-cheat-sheet

ossf / fuzz-introspector

security-checklist / php-security-check-list

lawndoc / jaws

GaloisInc / MATE

lololosys / awesome-baseband-research

mebeim / systrack

fierceoj / ShonyDanza

mirchr / security-research

mebeim / linux-syscalls

dyjakan / interpreter-bugs

lololosys / awesome_cisco_exploitation

Chocapikk / CVE-2023-6553

Chocapikk / CVE-2023-4966

disclose / dioterms

userlandkernel / ios-unstripped-kexts

Macmod / STARS

win3zz / Meta-Owned-IT-Assets

omarhashem123 / Security-Research

EnableSecurity / advisories

lololosys / cisco_ios_research

redcanaryco / public-research

0dayInc / pwn

captn3m0 / sanskari-proxy

feedhenry / mobile-security

r3k4t / phone-number-info