securitymania Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

bugcrowd-levelup-subdomain-enumeration

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

building_virtual_machine_labs-live_training

Resources for Building Virtual Machine Labs Live Training. YEET.

cloud

cmd.jsp

A super small jsp webshell with file upload capabilities.

commix

Automated All-in-One OS command injection and exploitation tool.

crawlpy

Scrapy python crawler/spider with post/get login (handles CSRF), variable level of recursions and optionally save to disk

crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

ctf_scripts

This archive contains the different scripts which I was used in the CTF challenges. Sometimes the scripts are meaningless. If you get any sense with the scripts you can use for your solutions

example-for-devslop

Example for OWASP devslop

findomain

The fastest and cross-platform subdomain enumerator, do not waste your time.

flowcharts

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem

heartbleed-poc

:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:

hello_world

This is my first git note

hitm3

Hitme is a baby version of Postb.in service.

html5_attack_and_secure

HTML5 Training material for Attack and Secure training sessions.

httprobe

This script is used to detect the domain is accepting HTTP or HTTPS connection. You can pass Sub-domaina list as input

interlace

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

jekyll-travis

Integrate Jekyll with Github Pages and Travis CI to automatically build Jekyll site

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

ldd3

Linux Device Drivers 3 examples updated to work in recent kernels

leaky-paths

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

lifestylestore

An Online Shopping website[Built for learning purpose]

magisk

Magic Mask Twrp Flash file

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

pathbrute

Pathbrute