raviv935 Goto Github PK

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugcrowd_university

Open source education content for the researcher community

burpsuite-for-pentester

cognizant_early_engagement

Solutions for the Cognizant Early Engagement learning platform.

dictionaries

Misc dictionaries for directory/file enumeration, username enumeration, password dictionary/bruteforce attacks

f5bigipexploit

ffuf

Fast web fuzzer written in Go

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

googd0rker

GoogD0rker is a tool for firing off google dorks against a target domain, it is purely for OSINT against a specific target domain. READ the readme before messaging or tweeting me.

hacker101

Hacker101

ics-security-tools

Tools, tips, tricks, and more for exploring ICS Security.

learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

tbhm

The Bug Hunters Methodology

vulnerabilities-approach-slides

PDF slides

web-application-pentest-checklist

webapp

Sample Web App with Maven for Jenkins Demo

xss-cheatsheet

Most Important XSS cheatSheets for Web Application Penetration Testing/Bug Bounty