cyal1 Goto Github PK

.gf

abuse-ssl-bypass-waf

Bypassing WAF by abusing SSL/TLS Ciphers

android-certkiller

Script to Bypass SSL/Certificate Pinning in Android

android-training

【Android 修炼手册】

apkurlgrep

Extract endpoints from APK files

aquatone

A Tool for Domain Flyovers

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

awesome-bugbounty-writeups

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awstats

AWStats Log Analyzer project (official sources)

bbrf-client

The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices

bcrypt

My Burp Suite extension. Integration of some tools.

bcryptmontoya

BcryptMontoya is a powerful plugin for Burp Suite that allows you to effortlessly modify HTTP requests and responses passing through the Burp Suite proxy using Jython code or gRPC, especially when dealing with encrypted requests.

bcryptrpcserver

besticon

Favicon service written in Go

bind-shell-python

This is a basic bind shell script , containting both server and client classes, i will upgrade it with time adding new features and make it look more lethal

blackdex

BlackDex is an Android unpack tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phones or emulators, you can unpack APK File in several seconds.

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

blisqy

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bountystrike-sh

Poor (rich?) man's bug bounty pipeline

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

burpcollector

通过BurpSuite来构建自己的爆破字典，可以通过字典爆破来发现隐藏资产。对 https://github.com/TEag1e/BurpCollector 的增强，通过熵(混乱程度的度量)计算去除混乱的数据。

bypass-40x

bypass 401/403

bytecode-viewer

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

c-jwt-cracker

JWT brute force cracker written in C

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cboard

An easy to use, self-service open BI reporting and BI dashboard platform.

changedetection.io

changedetection.io - The best and simplest self-hosted open source website change detection monitoring and notification service. An alternative to Visualping, Watchtower etc. Designed for simplicity - the main goal is to simply monitor which websites had a text change. Open source web page change detection - Now also includes JSON API change detection and monitoring support!