web-hacking-playground

Web Hacking Playground Description Web Hacking Playground est un environnement de hacking web contrôlé. Il contient des vulnérabilités trouvées dans des cas réels, à la fois dans des tests d'intrusion et dans des programmes de Bug Bounty. L'objectif est que les utilisateurs puissent s'entraîner...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

axiom

WARNING : Axiom Classic is now in maintenance mode. We encourage you to transition to the new Ax Framework. In the coming months, we will introduce essential quality-of-life updates to Axiom Classic before 2025. Long live Axiom! We are lucky enough to be sponsored by the awesome SecurityTrails!...

NoXss

NoXss NoXss est un scanner de vulnérabilités de scripts intersites XSS prenant en charge le XSS réfléchi et le XSS basé sur le DOM. Il est très rapide et adapté au test de millions d'URLs. Il a permis de découvrir plusieurs vulnérabilités XSS dans le cadre de programmes Bug Bounty. Fonctionnalité...

pentest-guide

Guide de test d'intrusion basé sur l'OWASP + Extra Ce guide est destiné aux testeurs d'intrusion recherchant les cas de test appropriés nécessaires lors d'un projet de test d'intrusion. J'ai réorganisé le Guide de test OWASP v4 de mon point de vue en incluant 9 classes de test et chaque classe...

Oneliner-Bugbounty

Oneliner-Bugbounty Коллекция скриптов-однострочников для bug bounty Список инструментов Subfinder Naabu httpx Nuclei Waybackurls DNSProbe gf sqlmap qsreplace hakrawler Puredns GauPlus uro Автосканер root@kitploit: subfinder -d site.com -all | naabu | httpx | nuclei -t nuclei-templates...

Bug-Bounty

בס״ד ⚜️ Aภl๏miuภuຮ ⚜️ ⫷ HacKingPro ⫸ ⫷ TryHackMe | KoTH ⫸ ⫷ Privilege-Escalation⫸ ⫷ ScanPro | Linfo | Diablo ⫸ ⫷ Offensive-Security | PenTest ⫸ ⫷ Goals | Studies | HacKing | AnyTeam ⫸ Bug Bounty Полезные подборки Книги Шпаргалки Чек-листы Инструменты Словники Дополнительно GitHub Bounty GitHub...

awesome-devsecops

Awesome DevSecOps Inspired by the awesome- trend on GitHub. This is a collection of documents, presentations, videos, training materials, tools, services and general leadership that support the DevSecOps mission. These are the essential building blocks and tidbits that can help you to arrange for...

cuckoo-droid

CuckooDroid - Automated Android Malware Analysis. Contributed By Check Point Software Technologies LTD. CuckooDroid is an extension of Cuckoo Sandbox the Open Source software for automating analysis of suspicious files, CuckooDroid brigs to cuckoo the capabilities of execution and analysis of...

xsshunter

DEPRECATED - TRY THE NEW EXPRESS VERSION See here for more info: https://github.com/mandatoryprogrammer/xsshunter-express XSS Hunter Source Code This is a portable version of the source code running on https://xsshunter.com. It is designed to be easily-installable on any server for security...

chomp-scan

Chomp Scan A scripted pipeline of tools to simplify the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs. If you've found any bugs using this tool, please let me know! Scope Chomp Scan is a Bash script that chains together the fastest and most effective tools in...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

Afuzz

Afuzz - 자동화된 웹 경로 퍼징 도구 Afuzz는 버그 바운티 프로젝트를 위한 자동화된 웹 경로 퍼징 도구입니다. Afuzz 는 @rapiddns에 의해 활발히 개발되고 있습니다. 기능 Afuzz는 웹사이트에서 사용된 개발 언어를 자동으로 감지하고, 언어에 따라 확장자를 생성합니다. 블랙리스트를 사용하여 유효하지 않은 페이지를 필터링합니다. 화이트리스트를 사용하여 버그 바운티 헌터가 관심 있는 페이지 내용을 찾습니다. 페이지 내 랜덤 콘텐츠를 필터링합니다. 다양한 방식으로 404 오류 페이지를 판단합니다. 스캔 후 결과에...

awesome-websocket-security

Awesome WebSockets Security Подборка CVE, исследований и справочных материалов по безопасности WebSocket Содержание Уязвимости библиотек WebSocket Доклады с конференций Распространённые слабые места WebSocket Инструменты безопасности WebSocket Разборы Bug Bounty Полезные записи в блогах Уязвимост...

wordlists

Wordlists Реальные инфосек-словники, регулярно обновляемые Текущие словники Технологии Эти словники основаны на исходном коде CMS/серверов/фреймворков, перечисленных здесь. Текущие словники включают: Wordpress Joomla Drupal Magento Ghost Tomcat Есть 2 версии каждого словника: Базовая пример...

Bug-Bounty-Beginner-Roadmap

이 저장소에 기여하는 것을 망설이지 마세요! 버그 바운티 입문자 로드맵 안녕하세요! 저는 Ansh Bhawnani 입니다. 현재 보안 엔지니어로 일하고 있으며, 파트타임으로 콘텐츠 크리에이터로도 활동하고 있습니다. 저는 버그 바운티 분야에서 경력을 시작하려는 젊고 열정적인 사람들을 안내하기 위해 이 저장소를 만들었으며, 누구나 기여할 수 있도록 하고 있습니다. 더 많은 콘텐츠가 정기적으로 추가될 예정이니 계속 지켜봐 주세요. 그럼 시작해 봅시다! 참고: 버그 바운티 환경은 최근 몇 년 사이 크게 변했습니다. 1년 전에는 쉽게 ...

Bountystrike-sh

Bountystrike-sh Bountystrike-sh is a collection of bash and python scripts that installs common bug bounty tools, performs recon scans and continous asset discovery. Bountystrike-sh is opensource but belongs to the BountyStrike project, self-hosted bug bounty management system. root@kitploit: | \...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

subscraper

SubScraper Aperçu :smallbluediamond: Utilisation :smallbluediamond: Contribuer SubScraper est un outil d'énumération de sous-domaines qui utilise diverses techniques pour trouver les sous-domaines d'une cible donnée. L'énumération des sous-domaines est particulièrement utile lors des tests...

bugbounty-cheatsheet

Шпаргалка по Bug Bounty 📚 Справочник| 🔎 Уязвимости ---|--- Платформы Bug Bounty| XSS Книги| SQLi Специальные инструменты| SSRF Разведка| CRLF-инъекция Платформы для практики| CSV-инъекция Советы по Bug Bounty| LFI | XXE | RCE | Открытое перенаправление | Криптография | Инъекция шаблонов | Вклад в...