toekhaing Goto Github PK

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome

:sunglasses: Curated list of awesome lists

awesome-cve-poc

✍️ A curated list of CVE PoCs.

big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

eshoponweb

Sample ASP.NET Core 8.0 reference application, powered by Microsoft, demonstrating a layered application architecture with monolithic deployment model. Download the eBook PDF from docs folder.

exploit-database

The official Exploit Database repository

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

github-dorks

The repository contains useful GitHub dorks for finding open-source vulnerabilities.

graduation

$ git remote <graduation> yearbook

linux-kernel-exploits

linux-kernel-exploits Linux平台提权漏洞集合

miscellaneous

Miscellaneous tools and patches that I have written/hacked/forked over the years

mmcybcon

Myanmar Cyber Conference Web Theme

owaspcsrftester

Automatically exported from code.google.com/p/owaspcsrftester

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

samsung-ime-rce-poc

Samsung Remote Code Execution as System User

script

My Impotant scripts and command while performing assessment.

the-shell

Ghost Theme

threat-hunting-kiddie

Threat Hunting Kiddie compile the techniques and Indicator of Compromise (IoC) to perform the Compromise Assessment and Threat Hunting.

threathunting

An informational repo about hunting for adversaries in your IT environment.

top-10-cicd-security-risks

udpstorm

UDP attack also called Chargen Attack.

vane

A GPL fork of the popular wordpress vulnerability scanner WPScan

vulnplanet

Vulnerable code snippets with fixes for Web2, Web3, API, iOS, Android and Infrastructure-as-Code (IaC)

weapons4pentester

:hocho: This repo contains required files for web application pentest.

xml_attacks

Collection of XML Attacks & Payloads

xssya

XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)

your-first-lab-cb-gh-000