x00tex

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

PEASS-ng

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

Awesome-Hacking-Resources

A collection of hacking / penetration testing resources to make you better!

trufflehog

Find and verify secrets

emoji-cheat-sheet

A markdown version emoji cheat sheet

amass

In-depth attack surface mapping and asset discovery

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

portmaster

🏔 Love Freedom - ❌ Block Mass Surveillance

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

fuzzDicts

Web Pentesting Fuzz 字典,一个就够了。

Awesome-WAF

🔥 Web-application firewalls (WAFs) from security standpoint.

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

7XX-rfc

An RFC for a new series of HTTP status codes covering developer fouls.

KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

tbhm

The Bug Hunters Methodology

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

static-binaries

Various *nix tools built as statically-linked binaries

pwncat

Fancy reverse and bind shell handler

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

dirty_sock

Linux privilege escalation exploit via snapd (CVE-2019-7304)

security-resources

A communal outpouring of online resources for learning different things in cybersecurity

tipjar

hackTheBox

Hackthebox weekly boxes writeups.

duckscripts

Collection of script i wrote during bug bounty hunting.