0day366 Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

amass

In-depth attack surface mapping and asset discovery

awesome-bugbounty-tools

A curated list of various bug bounty tools

blackhat_asia2023

Black Hat Asia 2023 PDF Public

bluebox

BlueBox Malware analysis Box and Cyber threat intelligence.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

cve-2021-41773

CVE-2021-41773 Path Traversal vulnerability in Apache 2.4.49.

cve-2022-21661

The first poc video presenting the sql injection test from ( WordPress Core 5.8.2-'WP_Query' / CVE-2022-21661)

cve-2022-31793

cve_2020_2546

CVE-2020-2546，CVE-2020-2915 CVE-2020-2801 CVE-2020-2798 CVE-2020-2883 CVE-2020-2884 CVE-2020-2950 WebLogic T3 payload exploit poc python3,

dark-web-archives

Archives of the criminal side of the internet

exploits

Some of my exploits.

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

free-certifications

A curated list of free courses & certifications.

fuite

A tool for finding memory leaks in web apps

guide-ceh-practical-master

http3-attacks

HTTP3-attacks (CVE-2022-30592)

jsfscan.sh

Automation for javascript recon in bug bounty.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

knowledgesharing

leakcanary

A memory leak detection library for Android.

malware_api_class

Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

misp-training

MISP trainings, threat intel and information sharing training materials with source code

mleaksfinder

Find memory leaks in your iOS app at develop time.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

nuclei-templates

Community curated list of templates for the nuclei engine to find security vulnerabilities.

panopticon-aquaticpanda

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pegasus_spyware

decompiled pegasus_spyware