hunt2behunter Goto Github PK

osce-complete-guide

OSWE, OSEP, OSED

oswe-labs-poc

Dockerized labs For Web Expert (OSWE) certification. Preparation for coming AWAE Training ...

oswe-prep

An OSWE Guide

path_travelsal_payload_list

Path Traversal Vulnerability Payload List

payloads

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

practical-xss

privilege-escalation

Linux and windows privilege escalations

proof-of-concept-collection

Collection of open source Malware Techniques distributed online

prototype-pollution-explained

Prototype Pollution in JavaScript

pwn_jenkins

Notes about attacking Jenkins servers

python-for-security

rce

A Simple Web Shell used for Remote Code Execution.

recon

Recon is a script to perform a full recon on a target with the main tools to search for vulnerabilities. Created based on @ofjaaah and @Jhaddix methodologies

some-bugbounty-tips-from-my-twitter-feed

BUGBOUNTY

spring-boot-upload-file-lead-to-rce-tricks

spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧

springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

sql_injection_payload

SQL Injection Payload List

ssrfire

An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects

subdomains-brutforce-wordlists-collection

sudo_killer

A tool to identify and exploit sudo rules' misconfigurations and vulnerabilities within sudo for linux privilege escalation.

superwordlist

基于实战沉淀下的各种弱口令字典

synackapi

teler-resources

teler Resource Collections

test

the-nuclei-templates

Nuclei templates written by us.

thesis

This repository contains the scripts that I used for my thesis "Discovery of information disclosure vulnerabilities in the software development process"

top10webseclist

Top Ten Web Hacking Techniques List

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

toxssin

A POST-XSS exploitation tool.