nabilrad Goto Github PK

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

azure_devops

Azure DevOps pipeline snippets

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

deepce

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

dlp_test

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

ligolo-ng

An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.

linkfinder

A python script that finds endpoints in JavaScript files

markdown-cheatsheet

The Ultimate Markdown Cheat Sheet

msf-venom-cheatsheet

Single Page Cheatsheet for common MSF Venom One Liners

nowafpls

Burp Plugin to Bypass WAFs through the insertion of Junk Data

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

php-reverse-shell

phpbash

A semi-interactive PHP shell compressed into a single file.

recon_profile

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List