truonghuuphuc Goto Github PK

4-zero-3

403/401 Bypass Methods + Bash Automation + Your Support ;)

advanced-sql-injection-cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

allaboutbugbounty

All about bug bounty (bypasses, payloads, and etc)

androidmobilepentest101

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

bug-bounty

list of bug bounty writeups

bug-bounty-roadmaps

Bug Bounty Roadmaps

corruptsvgfile

Corrupt SVG File With XSS

cve

All of my found cves

cve-1

CVE Update

cve-2024-27956

CVE-2024-27956 WordPress Automatic < 3.92.1 - Unauthenticated SQL Injection

cve-2024-27971-note

CVE-2024-27971 WordPress Premmerce Permalink Manager for WooCommerce Plugin <= 2.3.10 is vulnerable to Local File Inclusion

cve-2024-27972-poc

CVE-2024-27972 WP Fusion Lite <= 3.41.24 - Authenticated (Contributor+) Remote Code Execution

cve-2024-30491-poc

CVE-2024-30491 ProfileGrid <= 5.7.8 - Authenticated (Subscriber+) SQL Injection

cve-2024-32523-poc

CVE-2024-32523 Mailster <= 4.0.6 - Unauthenticated Local File Inclusion

cve-2024-32709-poc

CVE-2024-32709 WP-Recall – Registration, Profile, Commerce & More <= 16.26.5 - Unauthenticated SQL Injection

cve-2024-3293-poc

CVE-2024-3293 rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Contributor+) SQL Injection via rtmedia_gallery Shortcode

cve-2024-3495-poc

CVE-2024-3495 Country State City Dropdown CF7 <= 2.7.2 - Unauthenticated SQL Injection

cve-2024-3552-poc

CVE-2024-3552 Web Directory Free <= 1.6.9 - Unauthenticated SQL Injection

cve-2024-3806-and-cve-2024-3807-poc

CVE-2024-3806: Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts CVE-2024-3807: Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta

cve-2024-4295-poc

CVE-2024-4295 Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

cve-2024-4352-poc

CVE-2024-4352 Tutor LMS Pro <= 2.7.0 - Missing Authorization to SQL Injection

cve-2024-4443-poc

CVE-2024-4443 Business Directory Plugin – Easy Listing Directories for WordPress <= 6.4.2 - Unauthenticated SQL Injection via listingfields Parameter

cve-2024-5326-poc

CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update

cve-2024-5522-poc

CVE-2024-5522 HTML5 Video Player <= 2.5.26 - Unauthenticated SQL Injection

golden-guide-for-pentesting

Golden Guide

offensive-resources

A Huge Learning Resources with Labs For Offensive Security Players

owasp-zap-scripts

OWASP ZAP Proxy Scripts Scan CVE

poc-proxycommand-vulnerable-v2

Proof of conept to exploit vulnerable proxycommand configurations on ssh clients

python

recon-bugbounty

Simple recon using multiple tools!