binhan98 Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

awesome-api-security

A collection of awesome API Security tools and resources.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-dotnet-core

:honeybee: A collection of awesome .NET core libraries, tools, frameworks and software

awesome-dotnet-security

Awesome .NET Security Resources

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

axiom

The dynamic infrastructure framework for anybody! Distribute the workload of many different tools with ease, including nmap, ffuf, masscan, nuclei and many more!

bug-bounty

Bug Bounty ~

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

codeql-uboot

ctflab

CTFLab

cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

dalfox

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

dive

A tool for exploring each layer in a docker image

find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

findomain

The fastest and cross-platform subdomain enumerator, do not waste your time.

fuzzingtool

Software for fuzzing, used on web application pentestings.

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

graphqlmap

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

headi

Customisable and automated HTTP header injection

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

jaeles

The Swiss Army knife for automated Web Application Testing

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

library

n8n

Free and source-available fair-code licensed workflow automation tool. Easily automate tasks across different services.

oauth-2.0-security-cheat-sheet

oauth security guidelines

osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

owasp-masvs

The Mobile Application Security Verification Standard (MASVS) is a standard for mobile app security.