saleh-alfawzan Goto Github PK

autorize-for-idor-burp-ext

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

bounty-targets-data-codered

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bugbounty-cheatsheet-asheksec

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

bugminer

crtsh-py-subdomain

A Python Script to Get Subdomain using https://crt.sh

fuzzdb-shownby-insiderphd

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

hackerone-reports

Top disclosed reports from HackerOne

howtohunt

Collection of methodology and test case for various web vulnerabilities.

payloadsallthethings-bugbounty

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

priv8-nuclei-templates

My Priv8 Nuclei Templates

qsreplace

Accept URLs on stdin, replace all query string values with a user-supplied value

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

securitytestingfrom_xss-rat

Ton of security notes and resources on here, including tips from Ed Overflow, OSCP-related files, and even practical demonstrations.

sql-injection-payload-list

🎯 SQL Injection Payload List

trufflehog

Find and verify credentials

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

webpentestsecret_from_nafisi

100 Bug Bounty Secret

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

xsscrapy

XSS spider - 66/66 wavsep XSS detected

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!