d1pakda5 Goto Github PK

0d1n

Web security tool to make fuzzing at HTTP/S, Beta

0x-brave

My reports to Brave Software from H1 (~15 bugs)

1earn

个人维护的安全知识框架,内容包括不仅限于 web安全、工控安全、取证、应急、蓝队设施部署、后渗透、Linux安全、各类靶机writup

2018-blackhat-tools-list

2018 BlackHat Tools List

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

30-days-of-javascript

30 days of JavaScript programming challenge is a step by step guide to learn JavaScript programming language in 30 days

a-full-list-of-wordlists

this contain the burp pack

aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

acomplete-guide-to-dir-brute-force-admin-panel-and-api-endpoints

ad-attack-defense

Active Directory Security For Red & Blue Team

adhrit

Adhrit is an open source Android APK reversing and analysis tool that can help security researchers and CTF enthusiasts alike. The tool is an effort to cut down on the amount of time spent on reversing and basic reconnaissance of Android applications.

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

aem-hacker

aemscan

Adobe Experience Manager Vulnerability Scanner

aiodnsbrute

Python 3.5+ DNS asynchronous brute force utility

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

allthingsandroid

A Collection of Android Pentest Learning Materials

allvideopocsfromhackerone

This script grab public report from hacker one and make some folders with poc videos

amass

In-Depth Subdomain Enumeration

amass-1

In-depth DNS Enumeration and Network Mapping

andrill

a vulnerable mobile application interacting with a back-end API

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

android_app_security_checklist

Android App Security Checklist

androidtrainings

Mobile security trainings based on android

anticheat-testing-framework

Framework for testing any Anti-Cheat

anubis-db

Database to store previously found subdomains

apache-struts-shodan-exploit

This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

apifuzzer

Fuzz your application using you Swagger or API Blueprint definition without coding

apk-anal

Android APK analyzer based on radare2 and others.