chienhm Goto Github PK

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

advanced-sql-injection-for-awae

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-web-security

🐶 A curated list of Web Security materials and resources.

behinder

“冰蝎”动态二进制加密网站管理客户端

bug-bounty-toolz

BBT - Bug Bounty Tools

bug-bounty-wordlists

burpsuite_403bypasser

Burpsuite Extension to bypass 403 restricted directory

checklists

Red Teaming & Pentesting checklists for various engagements

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cve

Gather and update all available and newest CVEs with their PoC.

cve-2022-1388_poc

F5 BIG-IP RCE exploitation (CVE-2022-1388)

default-credentials

Default usernames and passwords for various systems (VoIP,IPMI,Oracle).

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

dictionarys-for-brute-force-ethical-hacking

This repository present a lot of file to realize various ethical hacking tricks

ffuf

Fast web fuzzer written in Go

howtohunt

Collection of methodology and test case for various web vulnerabilities.

imagemagick-lfi-poc

ImageMagick LFI PoC [CVE-2022-44268]

insecure-firebase-exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

inventory

Asset inventory on public bug bounty programs.

julius-gabians

Config files for my GitHub profile.

knowledgesharing

libnfs

NFS client library

log4j2scan

Log4j2 RCE Passive Scanner plugin for BurpSuite

mind-maps

Mind-Maps of Several Things

miscellaneous

Miscellaneous tools and patches that I have written/hacked/forked over the years

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

oscp-pwk

This is my cheatsheet and scripts developed while taking the Offensive Security Penetration Testing with Kali Linux course.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pen-test-tools

All the information provided on this site is for educational purposes only.