0xjoshua.github.io

assignment1

assignment1-1

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-hacking-tools

Awesome Hacking Tools

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

awesome-web-security

🐶 A curated list of Web Security materials and resources.

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

butanenacho.github.io

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

github-search

Tools to perform basic search on GitHub.

h4cks

Combination of all my Resources, Links & Scripts

hackeronereports

Here you can find mostly all disclosed h1 reports

hello-world

horizon

Horizon - Automated Reconnissance

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

my-ctf-web-challenges

Collection of CTF Web challenges I made

oasam

OASAM is the acronym of Open Android Security Assessment Methodology and its purpose is to become a reference framework on Android application vulnerability assessments.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

rc7c6q7udyd2qmxvrhp8usanhen4bt.burpcollaborator.net

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

site

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

weird_proxies

Reverse proxies cheatsheet