aadhie Goto Github PK

all-defense-tool

本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

bugbounty

RepoToStoreBugBountyInfo

bugfever

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️🔥

h4cks

Combination of all my Resources, Links & Scripts

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

onelistforall

Rockyou for web fuzzing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-list

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

ports-list

pwk-cheatsheet

reghex

A collection of regexes for every possbile use

shosubgo

Small tool to Grab subdomains using Shodan api.

subdomain

Hacks For Subdomain Enumeration

web-ctf-cheatsheet

Web CTF CheatSheet 🐈

werdlists

:keyboard: Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases