hehacks Goto Github PK

ssrf_vulnerable_lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud.

sub.sh

Multiprocessing(Parallel)Subdomain Detect Script

swagger-ez

A tool geared towards pentesting APIs using OpenAPI definitions.

swf_json_csrf

swiftness-static

swiftsecurity

swiftshield

🔒 Swift Obfuscator that protects iOS apps against reverse engineering attacks.

tess

A Simple Subdomain Enumeration Script written in bash

test_doc

thc-tips-tricks-hacks-cheat-sheet

Various tips & tricks

the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

tiredful-api

An intentionally designed broken web application based on REST API

treehouse-wordlists

Wordlist for Hacking, Penetration Testing, Vulnerability Assessments and More

truegaze

Static analysis tool for Android/iOS apps focusing on security issues outside the source code

uber-apk-signer

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.

unrootbeer

Disable root checks performed by rootbeer library (for security testing)

unsafe_bank

Vulnerable Banking Suite

virtualseccons

An ongoing list of virtual cybersecurity conferences.

vps_setup

Auto deployment of my VPS

vuldroid

Vuldroid is a Vulnerable Android Application made with security issues in order to demonstrate how they can occur in code

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

vuln-headers-extension

Firefox extension which parses the headers of all the requests which are being flowing through your firefox browser to detect for vulnerabilities.

vulnerable-graphql-api

A very vulnerable implementation of a GraphQL API.

vulnerable-sso

vulnerable single sign on

vyapi

VyAPI - A cloud based vulnerable hybrid Android App

watf-bank

WaTF Bank - What a Terrible Failure Mobile Banking Application for Android and iOS

weaponised-xss-payloads

XSS payloads designed to turn alert(1) into P1

web-app-pentesting-using-burp-suite