navidof5 Goto Github PK

diodb

Open-source vulnerability disclosure and bug bounty program database.

eventlistener-xss-recon

fresh-resolvers

List of fresh DNS resolvers updated daily

fzf

:cherry_blossom: A command-line fuzzy finder

gauplus

h1domains

HackerOne "in scope" domains

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

introduction-to-bash-scripting

Free Introduction to Bash Scripting eBook

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

kiterunner

Contextual Content Discovery Tool

learn-regex

Learn regex the easy way

loggerplusplus-api-filters

A Collection of Logger++ Filters for Hunting API Vulnerabilities

login-bypass-lists

payloads list for bypass login pages. SQLi!

mapcidr

Small utility program to perform multiple operations for a given subnet/CIDR ranges.

navidof5

Config files for my GitHub profile.

navidz5

Config files for my GitHub profile.

nuclei-templates-collection

Nuclei Templates Collection

onelistforall

Rockyou for web fuzzing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

pentesting-bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

recon-methodology

Recon Methodology

reconmaster

ReconMaster contest - scripts used and a write-up

resolvers

The most exhaustive list of reliable DNS resolvers.

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

securitytesting