navin-hacsociety Goto Github PK

ofx

漏洞批量验证框架

omnisci3nt

Unveiling the Hidden Layers of the Web – A Comprehensive Web Reconnaissance Tool

one-liners

A collection of awesome one-liners for bug bounty hunting.

openredirect-payloads

oralyzer

Open Redirection Analyzer

orgs-data

A mapping from bug bounty and vulnerability disclosure programs to respective GitHub organizations

ostorlab

Ostorlab is security scanner framework with the mantra of do one thing and do it well.

parameter-reflect-finder

Parameter-Reflect-Finder is a python based tool that helps you find reflected parameters which can have potential XSS or Open redirection vulnerabilities.

paramfirstcheck

ParamFirstCheck identifies in a list of urls those containing a parameter of the top 25 of the most vulnerable parameters for SQLi, LFI, RCE and Open redirect

parshu

Filter URLs to save your time.

payloads

Git All the Payloads! A collection of web attack payloads.

payloads-1

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-list

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

penetration_testing_poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

pentest-tools

Custom pentesting tools

pentesting-bugbounty

Bringing infosec community, group and leaders together that solve community challenges, problems, create cultural and provide value to Infosec community.

personal-security-checklist

🔒 A curated checklist of 300+ tips for protecting digital security and privacy in 2022

pinkerton

🕵️ Pinkerton is an JavaScript file crawler and secret finder developed in Python

poc-bomber

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

portfolio-website

A project to get you up and running with a portfolio site

private-nuclei-templates

project

project1

provies-bug-bounty-dorking-site-pbbds

This page should help you with the recon for security issues.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

qingscan

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

qingscanwiki

QingScan 是一款聚合扫描器，本身不生产安全扫描功能，但会作为一个安全扫描工具的搬运工； 当添加一个目标后，QingScan会自动调用各种扫描器对目标进行扫描，并将扫描结果录入到QingScan平台中进行聚合展示

quickxss

Automating XSS using Bash

r3con

Multi-functional Web Recon & Vulnerability Scanner Tool