gxbnt Goto Github PK

active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

arsenal

Arsenal is a Simple shell script (Bash) used to install tools and requirements for Bug Bounty

asnrecon

ASN reconnaissance script

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

ctf-tools

Some setup scripts for security research tools.

fuzzing-templates

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

howtohunt

Collection of methodology and test case for various web vulnerabilities.

hunt

js-scan

a .js scanner, built in php. designed to scrape urls and other info

jsparser

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

linkfinder

A python script that finds endpoints in JavaScript files

megplus

Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-list

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

pentest-bookmarks

a collection of handy bookmarks

pentesting-mind-map

Web Hacking and Red Teaming MindMap

pinkerton

🕵️ Pinkerton is an JavaScript file crawler and secret finder tool developed in Python

portswigger-websecurity-academy

Writeups for PortSwigger WebSecurity Academy

red-teaming-ttps

Useful Techniques, Tactics, and Procedures for red teamers and defenders, alike!

sliver

Adversary Emulation Framework

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

websites

Sample of portfolio