okaayfine Goto Github PK

h4cks

Combination of all my Resources, Links & Scripts

hackthebox-ctf-writeups

This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficulty.

hakcsp

Return domains in CSP headers in http response

hakrawler

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

haktrails

Golang client for querying SecurityTrails API data

helm4sec

List of helm-ready security tool to help your Security team easy deploy applications on Kubernetes.

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

how-web-works

What happens behind the scenes when we type www.google.com in a browser?

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

ilo-fli-common-libraries.github.io

ios-pentesting

Wiki for Pentesting iOS apps

it-security-lecture

University lecture on "IT Security" as Open Educational Resources material

jexboss

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

jsa

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

jsearch

jsfscan.sh

Automation for javascript recon in bug bounty.

juumla

🦁 Juumla is a python tool designed to identify and scan for version, config files in the CMS Joomla!

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

key-checker

Go scripts for checking API key / access token validity

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kijijica.github.io

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

libbls

Solidity-compatible BLS signatures, threshold encryption, distributed key generation library in modern C++. Actively maintained and used by SKALE for consensus, distributed random number gen, inter-chain communication and protection of transactions. BLS threshold signatures can be verified in Solidity, and used as random beacon (common coin)

lit-bb-hack-tools

Little Bug Bounty & Hacking Tools⚔️

livetargetsfinder

Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts and gather service information

log4j-affected-db

log4j-fuzz-head-poc

批量检测log4j漏洞，主要还是批量fuzzz 头