a-chernobrov Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

a-chernobrov

Config files for my GitHub profile.

ad-lab

An active directory laboratory for penetration testing.

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

apache-tomcat-pentesting

Apache Tomcat exploit and Pentesting guide for penetration tester

api-security-checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

awesome-compose

Awesome Docker Compose samples

awesome-rce-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

awesome-waf

🔥 Web-application firewalls (WAFs) from security standpoint.

awsgoat

AWSGoat : A Damn Vulnerable AWS Infrastructure

azure-red-team

Azure Security Resources and Notes

azuregoat

AzureGoat : A Damn Vulnerable Azure Infrastructure

badblood

Microsoft Active Directory Domain with a structure and thousands of objects.

bloodhound-tools

Miscellaneous tools for BloodHound

brokencrystals

A Broken Application - Very Vulnerable!

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-bounty-wordlists

bugbounty

RepoToStoreBugBountyInfo

bugcrowd_university

Open source education content for the researcher community

burp-suite-certified-practitioner-exam-study

Burp Suite Certified Practitioner Exam Study

burpsuite-collections

有关burpsuite的插件(非商店),文章以及使用技巧的收集(此项目不再提供burpsuite破解文件,如需要请在博客mrxn.net下载)---Collection of burpsuite plugins (non-stores), articles and tips for using Burpsuite, no crack version file

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cheatsheets

Cheat sheets for various projects.

devops-exercises

Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

exploits

эксплоиты

for_newby_in_bug_bounty

Репозиторий с материалами для развития в Bug Bounty

gf

A wrapper around grep, to help you grep for things