r-s0n Goto Github PK

appsec-labs

Files, notes, and walkthroughs for a variety of web application security labs (HTB, VulnLab, etc.)

ars0n-framework

A Modern Framework for Bug Bounty Hunting

ars0n-framework-dockerized

A Modern Bug Bounty Hunting Framework Packaged in Docker

ars0n-framework-scans

A repository to store data from completed scans in The Ars0n Framework

ars0n-framework-srt

A lightweight version of my bug bounty hunting framework designed to be run on Synack's LP+ machines.

bb-disco

Automation script that monitors for new Bug Bounty programs on various platforms

bug_bounty_notes

A collection of notes for bug bounty hunting

bug_scraper

A tool for bug bounty researchers to identify valid domains and urls in public HackerOne/BugCrowd programs

clear-sky

Bug Bounty Recon Automation Script -- Scan AWS IP Range Certs for Matching FQDN

command_injection-instructional_video

A short video showing the basic methodology of a command injection attack, as well ask how the attack can be leveraged to compromise a target server.

custom_exploits

A collection of custom built scripts to exploit known vulnerability chains

custom_vuln_scan_templates

A collection of custom built scan templates for automated vuln scanning (nuclei, Burp, etc.)

damn_vulnerable_node_app

This node application is 1000% secure.

drifting_embers

A Collection of Python Scripts used for Automated Vuln Scanning as part of my Bug Bounty Recon Methodology

dvwa-blind-sqli

A Blind SQLi Exploit Script for DVWA - Built for Demonstration Purposes

evolv3_security-front_end_practice

Website for hypothetical cyber security company built to practice front-end development

example_risk_assessment

Example of an Asset Inventory and Risk Mitigation Strategy for a Hypothetical Security Company (Built Around NIST/FIPS Documentation)

exploit-script-template

A basic python script for web app pen testing -- I got tired of re-writing the same thing three times a week~

fire_spreader

A Collection of Python Scripts used for phase II of my Bug Bounty Recon Methodology

fire_starter

Bug Bounty Recon Automation Script

github_brute-dork

Python script designed to identify Github search terms that can yield potentially valuable results for security researchers and bug bounty hunters

green-energy

Stand-alone Prototype Pollution Scanner for Bug Bounties

htb-script

Simple bash script to run when starting a new HTB machine

ignite

A Collection of Python Scripts used as part of my Bug Bounty Enumeration Methodology

javasoup

Simple python library that uses puppeteer to pull HTML from a loaded SPA

juice-shop-sast-test

Custom version of Juice Shop to test SAST tools

meditations

mern-cheatsheet

oswe-methodology

Blank methodology sheet for the OSWE exam

rs0ns-coffee-shop_android_app_files_unpacked

Intentionally Vulnerable Mobile Application