sagardhakal-photon Goto Github PK

acu807155

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

aem-hacker

akto

Instant, Open source API security → API discovery, automated business logic testing and runtime detection.

apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

apikit

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

arjun

HTTP parameter discovery suite.

asdfg

test

awesome-bugbounty-tools

A curated list of various bug bounty tools

awsscrape

A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.

bbot

OSINT automation for hackers.

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty

Here Are Some Collected resource from twitter

bug-bounty-toolz

BBT - Bug Bounty Tools

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

bugbounty_programs

this is the list of bugbounty programs

chameleon

contentdiscover

one liner for directory bruteforcing

cookiemonster

🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.

cswsh-scanner

Scanner for Cross-Site WebSocket Hijacking

cve-2022-44268-imagemagick-arbitrary-file-read-poc

CVE-2022-44268 ImageMagick Arbitrary File Read - Payload Generator

dradis-ce

Dradis Framework: Colllaboration and reporting for IT Security teams

finalproject

music database(django+mysql)

frogy

My subdomain enumeration script. It's unique in the way it is built upon.

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

github-dorks

Find leaked secrets via github search

graphquail

Burp Suite extension that offers a toolkit for testing GraphQL endpoints.

hack-gadgets

Use these for the good cause!

hakoriginfinder

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!