3cr3sc3nt Goto Github PK

cors-one-liner

A one liner Bash command which finds CORS in every possible endpoint.

ctf-tools

Some setup scripts for security research tools.

dirsearch

Web path scanner

dnsreaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

ffmpeg-avi-m3u-xbin

free-devops-books-1

A curated collection of free DevOps related eBooks

garud

An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

gf-secrets

Secret and/ credential patterns used for gf.

gitgraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

github-dorks

Collection of github dorks and helper tool to automate the process of checking dorks

github-search

Tools to perform basic search on GitHub.

gitscraper

A tool which scrapes public github repositories for common naming conventions in variables, folders and files

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

grafana-ssrf

Authenticated SSRF in Grafana

hackerone_wordlist

The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform

hacks

A collection of hacks and one-off scripts

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

kingofbugbountytips

mastering-go-second-edition

Mastering Go Second Edition, published by Packt

mdisec-twitch-yayinlari

https://twitch.tv/mdisec

mypapers

Repository for hosting my research papers

open-redirect-payloads

Open Redirect Payloads

openredirex

A Fuzzer for OpenRedirect issues

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

param-miner

parameth

This tool can be used to brute discover GET and POST parameters

paramspider

Mining parameters from dark corners of Web Archives

payloads

Git All the Payloads! A collection of web attack payloads.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF