ravirajrao Goto Github PK

apitestingstuff

This Repo is to Learn API testing and Tools/Reports Related to it

axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

bruteforce-lists

Some files for bruteforcing certain things.

bugbounty

RepoToStoreBugBountyInfo

bugbountytemplates

A collection of templates for bug bounty reporting

cve-2019-18935

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

dirsearch

Web path scanner

dod-disclosed-reports-from-hackerone

This Repo Contains all the Disclosed reported by DoD from HackerOne

ffuf

Fast web fuzzer written in Go

github-dorks

Find leaked secrets via github search

grex

A command-line tool and library for generating regular expressions from user-provided test cases

h1-search

Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.

hackerone-reports

Cool HackerOne Reports

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

kingofbugbountytips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

leakey

LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and easy to add checks for new services.

lfi-files

Wordlist to bruteforce for LFI

log4j-shell-poc

A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability.

m0chan.github.io

m0chan.github.io

naabu

A fast port scanner written in go with focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

oauth

🔗 OAuth 2.0 implementation for various providers in one place.

onelistforall

Rockyou for web fuzzing

pentest-book

pentest-guide

Penetration tests guide based on OWASP including test cases, resources and examples.

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrfmap

Automatic SSRF fuzzer and exploitation tool

ssrftest

SSRF testing tool

the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.