narsi-04a0 Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

a-red-teamer-diaries

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

api-securityempire

API Security Projecto aims to present unique attack & defense methods in API Security field

api_wordlist

A wordlist of API names for web application assessments

application-security

Resources for Application Security including Web, API, Android, iOS and Thick Client

arjun

HTTP parameter discovery suite.

attacksurfacemapper

AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

awesome-api-security

A collection of awesome API Security tools and resources.

awesome-infosec

A curated list of awesome infosec courses and training resources.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

bugbounty

Bugbounty Resources

bugbounty-cheatsheet-1

A list of interesting payloads, tips and tricks for bug bounty hunters.

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

dark-web-osint-tools

OSINT Tools for the Dark Web

deepdarkcti

Collection of Cyber Threat Intelligence sources from the deep and dark web

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

hacker-checklist

Hacking with the power of checklists.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

hopla

HopLa Burp Suite Extender plugin - Adds autocompletion support and useful payloads in Burp Suite

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

infrastructure-pentesting-checklist

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

lfi-files

Wordlist to bruteforce for LFI

linux-commands-for-basic-hacking

someone needs help

log4jake

mail-header-analysis

Analyzing email headers can provide valuable information for identifying potentially malicious domains