h-shawon Goto Github PK

aflplusplus

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

ars0n-framework

A Modern Framework for Bug Bounty Hunting

autonmap

Automated daily scan using Nmap and report on the differences

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-cybersecurity-blueteam

:computer:🛡️ A curated collection of awesome resources, tools, and other shiny things for cybersecurity blue teams.

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-malware-analysis

Defund the Police.

blueteam-tools

Tools and Techniques for Blue Team / Incident Response

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bug_bounty_notes

A collection of notes for bug bounty hunting

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

ceh-in-bullet-points

💻 Certified ethical hacker summary in bullet points

cloakquest3r

Uncover the true IP address of websites safeguarded by Cloudflare & Others

docs.hackerone.com

HackerOne Platform Documentation

fuxploider

File upload vulnerability scanner and exploitation tool.

guide-ceh-practical-master

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

hacker101coursework

Deprecated coursework from first iteration of Hacker101

httpx

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

infosechouse

Tools & Resources for Cyber Security Operations

labs-pentest

Free Labs to Train Your Pentest / CTF Skills

markdown-xss-payloads

XSS payloads for exploiting Markdown syntax

oscpnotes

Here are all the notes I personally took while studying for the OSCP which helped me pass.

oslab

osmedeus

A Workflow Engine for Offensive Security

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

sploitscan

SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated proof-of-concept (PoC) exploits.

ssrfmap

Automatic SSRF fuzzer and exploitation tool

subfuz

A subdomain fuzzing tool