ayoub5474 Goto Github PK

api_wordlist

A wordlist of API names for web application assessments

arabicts

archivefuzz

Hunt down the secrets from the WebArchives for Fun and Profit

assetnote

Push notifications for passive DNS data

assets-from-spf

A Python script to parse net blocks & domain names from SPF record

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and write-ups.

awesome-default-passwords

An organized collection of default passwords for various devices and services.

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

awesome-vulnerability-research

🦄 A curated list of the awesome resources about the Vulnerability Research

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awesome-windows-exploitation

A curated list of awesome Windows Exploitation resources, and shiny things. Inspired by awesom

b374k-mini

PHP Webshell with handy features.

bruteforce-dictionary

-> Small list for intruder attack on Burpsuite and bruteforcing

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-scans

aquatone results for sites with bug bountys

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

cc.py

Extracting URLs of a specific target based on the results of "commoncrawl.org"

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 150 other CMSs

crlf-injection-scanner

Command line tool for testing CRLF injection on list of domains.

ctf

CTF (Capture The Flag) writeups, code snippets, notes, scripts

ctf-workshop

Challenges for Binary Exploitation Workshop

custom-header

Custom Header adds enhancements and customization options to Home Assistant's Lovelace header.

dig-dug

Mass / Batch domain dig to .CSV bash script

dirdar

DirDar is a tool that searches for (403-Forbidden) directories to break it and get dir listing on it

dnsgen

Generates combination of domain names from the provided input.

domains-from-csp

A script to extract domain names from Content Security Policy(CSP) headers

ds_store_exp

A .DS_Store file disclosure exploit. It parse .DS_Store file and download files recursively.

expdevbadchars

Bad Characters highlighter for exploit development purposes supporting multiple input formats while comparing.