narendar-hub Goto Github PK

awesome-pentest-cheat-sheets

Collection of the cheat sheets useful for pentesting

awesome-red-teaming

List of Awesome Red Teaming Resources

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

awesome-web-hacking

A list of web application security

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bbtips

BugBountyTips

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

bigbountyrecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbounty-resources

byp4xx

Simple bash script to bypass "403 Forbidden" messages with well-known methods discussed in #bugbountytips

caldera

Automated Adversary Emulation Platform

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

click-jacking

click jacking

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

cyber-bookmarks

A list of bookmarks I have used since I started my journey in cyber security

cyber-security-books

"To competently perform rectifying security service, two critical incident response elements are necessary: information and organization." ― Robert E. Davis

cyber-security-resources

I have collected many Free Resources. Feel free share more resources

directory-payload-list

🎯 Directory Payload List

filterbypass

Browser's XSS Filter Bypass Cheat Sheet

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

github-search

Tools to perform basic search on GitHub.

google_dork_list

Google Dorks | Google helps you to find Vulnerable Websites that Indexed in Google Search Results. Here is the latest collection of Google Dorks. A collection of 13.760 Dorks. Author: Jolanda de Koff

hacking-books

hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.

hackingtool

ALL IN ONE Hacking Tool For Hackers

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

handbook

A living document for penetration testing and offensive security.