trongngk Goto Github PK

awesome-rce-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

b_lab

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

fuzz4bounty

Awesome wordlists for Bug Bounty Hunting

hackerone-reports

Top disclosed reports from HackerOne

he_mat_co_dien

howtohunt

Collection of methodology and test case for various web vulnerabilities.

insecure-firebase-exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

knowledgesharingbugbounty

labs-cybersecurity-resources

A Library of various cybersecurity resources

lap_trinh_java

p0wny-shell

Single-file PHP shell

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-notes

php-reverse-shell

protected-php-web-shell

A password protected PHP web backdoor that has multiple capabilities such as the ability to remote execute code and download files from a web server.

python-for-security

scanreflectedxss

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

secret-regex-list-api-key

List of regex for scraping secret API keys and juicy information.

thuat-toan-attt-py

thuat-toan-attt_c-code

thuc-hanh-attt

tmp

tool-command

Here I gather all the resources about hacking that I find interesting

web_laravel

webphp

windows-local-privilege-escalation-cookbook

Windows Local Privilege Escalation Cookbook

wordlist

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

yaml_login