achabi-ismail Goto Github PK

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

apkleaks

Scanning APK file for URIs, endpoints & secrets.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

bchecks

BChecks collection for Burp Suite Professional

bug_hunting

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness

fake-sms

A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy.

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

hackerone-reports

Top disclosed reports from HackerOne

howtohunt

Collection of methodology and test case for various web vulnerabilities.

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

jsmon

a javascript change monitoring tool for bugbounties

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

knowledgesharing

mitmproxy2swagger

Automagically reverse-engineer REST APIs via capturing traffic

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-list

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

poc-sto

takeover

Sub-Domain TakeOver Vulnerability Scanner

trufflehog

Find and verify credentials

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

web_hacking

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

zile

Extract API keys from file or url using by magic of python and regex.