tripatpu Goto Github PK

10000-h1-disclosed-reports

10,000 H1 Disclosed Reports

advanced-xss-payload-

advanced xss payload

awesome-bugbounty-builder

Awesome Bug bounty builder Project

awesome-bugbounty-tools

A curated list of various bug bounty tools

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

cloudmare

Cloudflare, Sucuri, Incapsula real IP tracker.

csffsfs

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

ffuf-tips-and-tricks

Describe how to use ffuf different options with examples

github-dorks

Find leaked secrets via github search

google-dorks-bug-bounty

A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting

hackerone-reports

Top disclosed reports from HackerOne

hbsqli

Automated Tool for Testing Header Based Blind SQL Injection

iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

massdns

A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

public-reports

bug bounty disclosed reports

punnutest

reverse-shell

Reverse Shell as a Service

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sns

IIS shortname scanner written in Go

subdom

subdomain

subdomain takeover by Jin bug bounty

tripatpu

Config files for my GitHub profile.

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

waf-bypass-xss-payloads

XSS payloads for bypassing WAF. This repository is updating continuously.

web-attack-cheat-sheet

Web Attack Cheat Sheet