udaryandotcom Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

amass

In-depth Attack Surface Mapping and Asset Discovery

amateur_pentes_step

android-penetration-testing

androidmalware_2020

Popular Android malware seen in 2020

awesome-cobaltstrike-defence

Defences against Cobalt Strike

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

beginner-network-pentesting

Notes for Beginner Network Pentesting Course

bigbountyrecon

BigBountyRecon tool utilises 58 different techniques to expediate the process of intial reconnaissance on the target organisation.

blueteam-interview-question

breach-parse

A tool for parsing breached passwords

bruteshark

Network Analysis Tool

burpsuite-secret_finder

Burp Suite extension to discover apikeys/accesstokens and sensitive data from HTTP response.

bypass-firewalls-by-dns-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

bypass-web-application-firewalls

Bypassing-Web-Application-Firewalls-And-XSS-Filters A series of python scripts for generating weird character combinations and lists for BurpSuite Pro for bypassing web application firewalls (WAF) and XSS filters. These python scripts have been created to fuzz wierd combinations: URL Escape Characters HTML Escape Characters Binary Characters These scripts were created during an assessment, while trying to bypass a Web Application Firewall (WAF) in order to exploit a XSS vulnerability. Differnt webservers and browsers interpret URL and strange characters differently which could lead to the bypassing of security controls. When I tried to send a > or < character the WAF would block the request. The following URL escapes I have noticed are traslated to < > ' by Apache2 based web servers: %(N%(n%)S%)U%)^%)s%)u%*C%*E%*c%*e%,.%.#%1N%1n%2S%2U%2^%2s%2u%3C%3E%3c%3e%5.%7#%:C%:E %:c%:e%HN%Hn%IS%IU%I^%Is%Iu%JC%JE%Jc%Je%L.%N#%XN%Xn%YS%YU%Y^%Ys%Yu%ZC%ZE%Zc%Ze%.%^# %hN%hn%iS%iU%i^%is%iu%jC%jE%jc%je%l.%n#%xN%xn%yS%yU%y^%ys%yu%zC%zE%zc%ze%|

cdef-discussion-docs

Documentation of Social Media Discussion and Documentation - Cyber Defence Community

cdef-magazine

cheatshit

for OSCP exam dude

cve-2020-5260

A HTTP PoC Endpoint for cve-2020-5260 which can be deployed to Heroku

cve_2019_0708_bluekeep_rce

bluekeep exploit

cyber-talents-qualifiers-2017-write-ups

Write up for the CyberTalents 2017 qualifications round

data-science--cheat-sheet

Cheat Sheets

datasciencecoursera

datasciencecoursera

datasharing

datasharing-1

The Leek group guide to data sharing

deepbluecli

dnsrecon

DNS Enumeration Script

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dpk_loan

dpk+l

dvwa

Damn Vulnerable Web Application (DVWA)