Mohamed AbdElmoneim's Projects
An automation tool to install the most popular tools for bug bounty or pentesting.
A Modern Framework for Bug Bounty Hunting
AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.
A curated list of various bug bounty tools
A curated list of amazingly awesome Burp Extensions
A curated list of GPT agents for cybersecurity
A collection of hacker tools using HackerOne's API
A collection of awesome one-liner scripts especially for bug bounty tips.
Collection of the cheat sheets useful for pentesting
Collection of cheat sheets useful for pentesting
π₯ Web-application firewalls (WAFs) from security standpoint.
The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!
This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports
A collection of PDF/books about the modern web application security and bug bounty.
node of the decentralized oracle network, bridging on and off-chain computation
π Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Try to find the origin IP of a webapp protected by Cloudflare.
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
This Python script exploits vulnerabilities in systems like cPanel, WHM, SSH, and FTP. It uses multiprocessing or threading to execute exploits, taking input from lists or prompts. The console displays the success or failure of the exploits.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
evilginx3 + gophish
Potentially dangerous files
Community curated list of nuclei templates for finding "unknown" security vulnerabilities.
Tips and Tutorials for Bug Bounty and also Penetration Tests.
An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), artificial intelligence security, vulnerability research, exploit development, reverse engineering, and more.
Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!