lamscun Goto Github PK

one-liners

A collection of awesome one-liners for bug bounty hunting.

open-redirect-payload-list

🎯 Open Redirect Payload List

packmypayload

A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file formats. Supports: ZIP, 7zip, PDF, ISO, IMG, CAB, VHD, VHDX

palen1x

Alpine-based distro that lets you install rootful and rootless palera1n-c.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

portable-data-exfiltration

This repo contains all the injections mentioned in my talk and enumerators.

protobuf-decoder

A simple Google Protobuf Decoder for Burp

python-log4rce

An All-In-One Pure Python PoC for CVE-2021-44228

raccoon4

APK Downloader for Google Play

redteam-offensivesecurity

Tools & Interesting Things for RedTeam Ops

reflutter

Flutter Reverse Engineering Framework

relative-url-extractor

A small tool that extracts relative URLs from a file.

rfi-lfi-payload-list

🎯 RFI/LFI Payload List

screentogif

🎬 ScreenToGif allows you to record a selected area of your screen, edit and save it as a gif or video.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secrets-patterns-db

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

server-side-prototype-pollution

SSPPG

springcore0day

SpringCore0day from https://share.vx-underground.org/

sql-injection-payload-list

🎯 SQL Injection Payload List

stews

A Security Tool for Enumerating WebSockets

sysmoneop

templates_reporting_bugcrowd

Repository to house markdown templates for researchers

test_firebae.github.io

test_firebase

testsubover

test subdomain takeover

turbo-intruder

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

unpack-burp

For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)

web-attack-cheat-sheet

Web Attack Cheat Sheet

xnlinkfinder

A python tool used to discover endpoints for a given target

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List