nhl0010 Goto Github PK

50-days-of-sqli

Learning and hunting SQL injection bugs for 50 continuous days

acomplete-guide-to-dir-brute-force-admin-panel-and-api-endpoints

adobe-experience-manager

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

awesome-bugbounty-builder

Awesome Bug bounty builder Project

awesome-dorks

Dorks for Bug Bounty Hunting

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

awesomexss

Awesome XSS stuff

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

checklist-buiseness-logic

Bug Bounty & Other Stuff

continuous-nuclei

Running nuclei Continuously

cve-2021-44228-poc-log4j-bypass-words

🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - A trick to bypass words blocking patches

datasploit

A tool to perform various OSINT techniques, aggregate all the raw data, visualise it on a dashboard, and facilitate alerting and monitoring on the data.

dir-wordlists

Some wordlists collected form github to all bug bounty hunters.

dns-wordlists

part of my wordlist to bruteforce DNS to find subdoamains.

ffufplus

You can read the writeup on this script here

from-osyrs_hackpanion

One repository for all your favourites: keeps the last version of tracked repos

hackerone-reports

Top disclosed reports from HackerOne

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

heaptruffle

Mine URLs from Browser's Heap Snapshot for fun and profit

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

log4jattacksurface

logmepwn

A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

mind-maps

Mind-Maps of Several Things

nhl0010

Config files for my GitHub profile.

nuclei-templates

Community curated list of templates for the nuclei engine to find a security vulnerability in application.