racthack Goto Github PK

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

anew

A tool for adding new lines to files, skipping duplicates

asnlookup

Leverage ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes, then run port scanning on it.

autografana_lfi

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-sec-talks

A collected list of awesome security talks

awesome-vulnerable

A curated list of VULNERABLE APPS and SYSTEMS which can be used as PENETRATION TESTING PRACTICE LAB.

awesome-vulnerable-apps

Awesome Vulnerable Applications

bbtools

basic bbtools , buggy , not recommended to use

bheem

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burp-suite

|| Activate Burp Suite Pro with Loader and Key-Generator ||

can-i-takeover-xyz

certificate-expiry-monitor

https://certificatemonitor.org https://108.167.151.13/

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

clickjack

Web based clickjack poc creator tool in python

clickjackingpoc

A Proof of Concept for Clickjacking Attacks

erebus

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

erebus-templates

Community curated list of templates for the erebus engine to find security vulnerabilities.

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

githubleak

This is an intentional vulnerable github repo for demo

gocrawler

ground-control

A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

h4cks

Combination of all my Resources, Links & Scripts

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

lfi-payload-list

LFI Payloads List coolected from github repos

masterstrategy_xss

my-cool-wordlist-for-fuzz-and-bugs

mypapers

Repository for hosting my research papers