dn1k Goto Github PK

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugbounty101

An entry level resource to learning bug bounty.

bugcrowd_university

Open source education content for the researcher community

byp4xx

Simple bash script to bypass "403 Forbidden" messages with well-known methods discussed in #bugbountytips

diggy

Extract endpoints from apk files.

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

gitdorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

github-hunter

This tool is for sensitive information searching on Github - The Fast Version here: https://github.com/Hell0W0rld0/Github_Hunter_By_Golang

gitleaks

Scan git repos (or files) for secrets using regex and entropy 🔑

impacket

Impacket is a collection of Python classes for working with network protocols.

intruderpayloads

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

iotsecurity101

From IoT Pentesting to IoT Security

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

owasp-top-10-practice

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-bookmarks

a collection of handy bookmarks

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

tbhm

The Bug Hunters Methodology

test_site

Repository for creating test site

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

ultrarelay

poison and relay NTLM credentials

webtech

xss-cheatsheet-data

This repository contains all the XSS cheatsheet data to allow contributions from the community.

xxe-injection-payload-list

🎯 XML External Entity (XXE) Injection Payload List