xsuperbug Goto Github PK

0x94scanner

Multi Thread POST|GET (BLIND/TIME BASED/HEADER/SQL/XSS/LFI) INJECTION SCANNER

acikkaynak

açık-kaynak.org | İnisiyatif, Topluluk ve Rehber

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

apitokens-are-everywhere

application-security

A place for all type of application security assessment checklist and cheatsheets.

aptnotes

Various public documents, whitepapers and articles about APT campaigns

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

attackdatamap

A datasource assessment on an event level to show potential coverage or the MITRE ATT&CK framework

awesome-electronjs-hacking

A curated list of awesome resources about Electron.js (in)security

awesome-waf

🔥 A curated list of awesome web-app firewall (WAF) stuff.

awesomexss

Awesome XSS stuff

betterdefaultpasslist

broken-link-finder

Broken Link Finder is a Burp Extension to detect broken links for a passive scanning domains and links.

bug-bounty-labs

All the labs in this repository simulate real world bugs I found in the wild

bugbounty

bugbounty-1

Bugbounty Resources

buildscript

buildxss

Build XSS is a Semi-Automatic XSS Payload Generator.

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

burpparamflagger

A Burp extension adding a passive scan check to flag parameters whose name or value may indicate a possible insertion point for SSRF or LFI.

calc_security_poc

A sample of proof of concept scripts that run Calc.exe with full source code.

cheatsheets

Penetration Testing/Security Cheatsheets

chromium-latest-linux

Scripts to download and run the latest Linux build of Chromium. A substitute for Chrome Canary on Linux.

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

commodity-injection-signatures

Scraped fresh from the Internet

compilecs

Use build-in compiler csc.exe and other tools to insert entrypoint

crackingwebctfs

Repo of files and setup from the free session conducted on Cracking Web CTFs on 15th April 2017 Bangalore.

credzcheckr

Testing default credentials

crypto_post

Encrypt your http post request's body to protect your form variables from hackers.

cve-2018-7600-drupal-rce

CVE-2018-7600 Drupal RCE