bpavesi Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

adrecon

ADRecon is a tool which gathers information about the Active Directory and generates a report which can provide a holistic picture of the current state of the target AD environment.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

autorecon

Simple shell script for automated domain recognition with some tools

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-cybersec-resources

An awesome collection of curated Cyber Security resources(Books, Tutorials, Blogs, Podcasts, ...)

awesome-httprequestsmuggling

A curated list of awesome blogs and tools about HTTP request smuggling attacks. Feel free to contribute! 🍻

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

bbscope

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

bbtz

BBT - Bug Bounty Tools (examples💡)

bounty-targets

This project crawls bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) hourly and dumps them into the bounty-targets-data repo

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-bounty-roadmaps

Bug Bounty Roadmaps

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bugbounty

All About BB

bugbounty-reports-templates

My small collection of reports templates

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

codesearch

Fast, indexed regexp search over large file trees

cruster

Intercepting MitM proxy with flexible security scanner power

curl-to-go

Convert curl commands to Go code in your browser

cve-2021-44228-apache-log4j-rce

Apache Log4j 远程代码执行

cve-2022-22954

cve-2022-42889-text4shell-docker

Dockerized POC for CVE-2022-42889 Text4Shell (with LunaSec research notes)

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

damn-vulnerable-js-sca

An intentionally vulnerable Javascript app containing notable vulnerabilities in its dependencies.

damnwebscanner

Another web vulnerabilities scanner, this extension works on Chrome and Opera