lambardarr Goto Github PK

amass

In-depth Attack Surface Mapping and Asset Discovery

arduino

first-repo

auto_wordlists

bashrec

bmartin-test.on-demand-nonprod.ovoenergy.com

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bountyit

A fuzzer made in golang for finding issues like xss, lfi, rce, ssti...that detects issues using change in content length and verify it using signatures

dnscan

gogs

Gogs is a painless self-hosted Git service

google

Google Assignment

it-cert-automation-practice

Google IT Automation with Python Professional Certificate - Practice files

lambardarr.github.io

lfi-files

Wordlist to bruteforce for LFI

pay.ovoenergy

pay.ovoenergy.com

payload

Payload

rce-methods

Common Ways to find RCE

s1n6h

Recon Script for Bug Bounty Hunters

s1n6h2

Subdomain Finder

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sresolver

sresolver is a command-line tool that resolves IP addresses to hostnames. It takes a list of IP addresses (in the format of IP:port or http(s)://IP) as input and outputs the corresponding hostnames.

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

subdomain-takeover

sudomy

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

try.citibikenyc.com

try.citibikenyc.com

try.fluidattacks.com

wordlists

Infosec Wordlists

wordlists-1

Aggregated wordlist pulled from commonly used tools for discovery, enumeration, fuzzing, and exploitation.