mbernardix Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

bbfuzzing.txt

bbtips

BugBountyTips

c_language

C language

cve

Gather and update all available and newest CVEs with their PoC.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

integer_overflow_payloads

Payloads used in syntribos to run various tests on OpenStack Projects

json-decoder

Automatically exported from code.google.com/p/burp-extensions

jsonbee

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

mbernardix.github.io

mongoaudit

🔥 A powerful MongoDB auditing and pentesting tool 🔥

morentharia.github.io

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-tools

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

poc-graphql

Research on GraphQL from an AppSec point of view.

qrmosru

кто прочел - тот лох

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

try_ssh_creds

try_ssh_creds on hosts range

what-happens-when

An attempt to answer the age old interview question "What happens when you type google.com into your browser and press enter?"