pcoder7 Goto Github PK

-tamper-

基于sqlmap，根据别人的模板自己改进了一些，也有收集了常用的脚本

0day

各种CMS、各种平台、各种系统、各种软件漏洞的EXP、POC ,该项目将持续更新

2cmd

Got a command that doesn't support input files like whois or sqlmap? Use 2cmd to take input from stdin and run each line with the command(s) given in the script file. Comes with lot's of pentest/red teaming/bug bounty/CTF scripts ready to use

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

api-security

OWASP API Security Project

api_wordlist

A wordlist of API names for web application assessments

aspx-fuzzing-wordlist

Aspx-Fuzzing-Wordlist

auto_wordlists

awesome-censys-queries

A collection of fascinating and bizarre Censys Search Queries

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-cybersecurity-handbooks

A huge chunk of my personal notes since I started playing CTFs and working as a Red Teamer.

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesome-waf

🔥 Web-application firewalls (WAFs) from security standpoint.

bash-bounty

Random Tools for Bug Bounty

bb-reports-templates

My small collection of reports templates

bbtz

BBT - Bug Bounty Tools (examples💡)

blind-ssrf

Nuclei Templates to reproduce Cracking the lens's Research

blind-xss-manager

Never forget where you inject.

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-fuzz-wordlist

This is a wordlist of directory fuzzing directories taken from various places for bug bounty purposes.

bug-bounty-tips

A collection of notes, checklists, writeups on bug bounty hunting and web application security.

bugbountyhuntingscripts

I built some bash functions to help me while doing mundane and repetitive tasks using BBRF, Nuclei or other Bug bounty tool.

bugbountyreporttemplates

List of reporting templates I have used since I started doing BBH.

burpsuitecertifiedpractitioner

Ultimate Burp Suite Exam and PortSwigger Labs Guide.

burpsuitepro-1.7.37-and-2022.8.5-cracked

Batch file to launch activated BurpSuit in Windows 10/ 11

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

cheatsheet-god

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet