herlore Goto Github PK

blind-ssrf-chains

An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability

bug-bounty

Ressources for bug bounty hunting

bug-bounty-methodology

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

dirhunt

Find web directories without bruteforce

free-resources

آرشیو تمام منابع رایگان آموزش برنامه نویسی به زبان فارسی

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

mtr

Official repository for mtr, a network diagnostic tool

mywlist

nemesis

A command-line network packet crafting and injection utility

nmap

nmap-cheatsheet

:notebook: Reference guide for scanning networks with Nmap.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

robofinder

rustscan

🤖 The Modern Port Scanner 🤖

sql-injection-dorks-list

Nice list of google dorks for SQL injection

tbhm

The Bug Hunters Methodology

tew

A quick ‘n dirty nmap parser written in Golang to convert nmap xml to IP:Port notation.

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

unfurl

Pull out bits of URLs provided on stdin

uro

declutters url lists for crawling/pentesting

waf-bypass

xss_vibes

A modern tool written in Python that automates your xss findings.