zicohip Goto Github PK

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-waf

🔥 Everything about web-application firewalls (WAF).

bbtz

BBT - Bug Bounty Tools

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbountyscanner

A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.

car-rental-system-project-in-java

ct_subdomains

An hourly updated list of subdomains gathered from certificate transparency logs

dirsearch

Web path scanner

enumerate-iam

Enumerate the permissions associated with AWS credential set

facebook-bugbounty-writeups

Collection of Facebook Bug Bounty Writeups

grafana-cve-2021-43798

Grafana Unauthorized arbitrary file reading vulnerability

hackerone

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

interactsh-collaborator

Burpsuite plugin for Interact.sh

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

mysecurity

nvim-config

My config for Neovim

osint-framework

OSINT Framework

payloads

payloadsallthethings-1

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

powershell-rat

Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.

reports

reverse-engineering

List of awesome reverse engineering resources

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

sqli-labs

SQLI labs to test error based, Blind boolean based, Time based.

subdomainizerw

tok

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

zicohip