s1m096 Goto Github PK

awae-prep

This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

awesome-list-of-secrets-in-environment-variables

🦄🔒 Awesome list of secrets in environment variables 🖥️

awesome-password-cracking

A curated list of awesome tools, research, papers and other projects related to password cracking and password security.

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

axiom

A dynamic infrastructure toolkit for red teamers and bug bounty hunters!

brutex

Automatically brute force all services running on a target.

bug-bounty

Ressources for bug bounty hunting

bugbounty

RepoToStoreBugBountyInfo

bugbounty-1

Bugbounty Resources

bugbountybooks

A collection of PDF/books about the modern web application security and bug bounty.

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

defaultcreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

disclosures

Public Disclosures

ffmpeg-avi-m3u-xbin

hackeronedb

The unofficial HackerOne disclosure Timeline

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

ibm

java-deserialization-cheat-sheet

The cheat sheet about Java Deserialization vulnerabilities

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

mailsniper

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

ngrok-rdp-1

You get free rdp

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

proxy-list

An automatic updated list of free SOCKS4, SOCKS5, HTTP & HTTPS proxies in JSON, TXT, CSV, XML & YAML format. Proxies are online at the time of testing & updated every 2 hours. Geolocation & detection status is also available.

pspy

Monitor linux processes without root permissions

public

stuff i'm willing to share with the world lol

pwn_jenkins

Notes about attacking Jenkins servers

pyaddepar

Wrapper for Addepar

recon-my-way

This repository created for personal use and added tools from my latest blog post.