Youssef Muhammad's repositories
CVE-2023-0669-Analysis
CVE analysis for CVE-2023-0669
CVE-2022-30507-PoC
PoC for Arbitrary Code Execution in Notable
CVE-2023-26360
Exploit for Arbitrary File Read for CVE-2023-26360 - Adobe Coldfusion
Bug-hunting-methodology
The Bug Hunters Methodology
awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
awesome-pentest
A collection of awesome penetration testing resources, tools and other shiny things
CVE-2022-41544
Exploit script for CVE-2022-41544 - RCE in get-simple CMS
Malware-collection
🔬Collection(-BIGGEST-) of malware, ransomware, RATs, botnets, stealers, etc.
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Resources-for-Beginner-Bug-Bounty-Hunters
A list of resources for those interested in getting started in bug bounties
.tmux
🇫🇷 Oh my tmux! My self-contained, pretty & versatile tmux configuration made with ❤️
AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
awesome_windows_logical_bugs
collect for learning cases
bypass-url-parser
bypass-url-parser
ByPassGodzilla
哥斯拉WebShell免杀生成 / Code By:Tas9er
CVE-2023-24055
CVE-2023-24055 POC written in PowerShell.
CVE-2023-51467
Apache OfBiz Auth Bypass Scanner for CVE-2023-51467
mortar
evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
PRET
Printer Exploitation Toolkit - The tool that made dumpster diving obsolete.
SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
semgrep
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Some_Pentesters_SecurityResearchers_RedTeamers
Some Pentesters, Security Researchers, Red Teamers which i learned from them a lot...
SubDomz
All in One Subdomain Enumeration Tool