1041148 matches found
awesome-hacker-search-engines
Awesome Hacker Search Engines A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more General β’ Servers β’ Vulnerabilities β’ Exploits β’ Attack surface β’ Code β’ Email addresses β’ Domains β’ URLs β’ DNS β’...
CVE-2024-27630
CVE-2024β27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...
Linux-Kernel-Dirty-Pipe-Exploitation-Logic-Bug-
Linux Kernel Dirty Pipe Exploitation Logic Bug by: Antonius w1sdom https://www.bluedragonsec.com https://github.com/bluedragonsecurity Dirty Pipe CVE-2022-0847 is one of the most significant security vulnerabilities in Linux Kernel 5.8 β 5.15.24, discovered by Max Kellermann in 2022. This...
bounty-targets-data
bounty-targets-data What's it for This repo contains data dumps of Hackerone and Bugcrowd scopes i.e. the domains that are eligible for bug bounty reports. The files provided are: Main files: domains.txt: full list of domains, without wildcards. wildcards.txt: full list of wildcard domains. Note:...
zk-xml-probe
zk-xml-probe Static XML fixtures for authorized bug bounty testing of XML parser behaviour CVE-2026-45071...
Mongo-Express - Remote Code Execution
Mongo-Express before 1.0.0 is susceptible to remote code execution because it uses safer-eval to validate user supplied javascript. Unfortunately safer-eval sandboxing capabilities are easily bypassed leading to remote code execution in the context of the node server. id: CVE-2020-24391 info: nam...
mantis_rce
mantisrce Python script to obtain RCE on Mantis Bug Tracker prior to version 1.2.x Check CVE-2008-4687 for additional information...
megplus
meg+ Deprecated Automated reconnaissance wrapper β TomNomNom's meg on steroids. Built by TomNomNom and EdOverflow. About This wrapper will automate numerous tasks and help you during your reconnaissance process. The script finds common issues, low hanging fruit, and assists you when approaching a...
CVE-2026-6471
π CVE-2026-6471 β PostGREShell π’οΈ A critical security vulnerability that has been present in PostgreSQL for 12 years has been discovered! A defensive, non-destructive vulnerability checker for CVE-2026-6471 π Overview CVE-2026-6471 is a PostgreSQL authorization vulnerability involving the logical...
-vercel-application-is-vulnerable-to-CVE-2025-66478.
-vercel-application-is-vulnerable-to-CVE-2025-66478. bug bounty...
InjuredAndroid
InjuredAndroid - CTF A vulnerable Android application with ctf examples based on bug bounty findings, exploitation concepts, and pure creativity. Now available on Google Play! https://play.google.com/store/apps/details?id=b3nac.injuredandroid Setup for a physical device 1. Download the latest...
Mind-Maps
MindMaps πΊοΈ This repository stores and houses various Mindmaps for bug bounty Huntersπ§βπ¦°, pentestersπ§βπ¦° and offensiveπ΄/defensiveπ΅ security Professionalsπ« provided by me as well as contributed by the communityπ§π»βπ€βπ§π½. Your contributions and suggestions are welcomed. Name| Link| Type| Description|...
CVE-2022-22947
CVE-2022-22947 Exp This bug seems to be not recurrent everytimeγ python3 requests...
Linux Distros Unpatched Vulnerability : CVE-2026-98375
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the lengt...
Web3Bugs
Demystifying Exploitable Bugs in Smart Contracts This project aims to provide a valuable resource for Web3 developers and security analysts by facilitating their understanding of exploitable bugs in smart contracts. We conduct a thorough analysis of exploitable bugs extracted from code4rena and...
patch-diffing-in-the-dark
Patch Diffing In The Dark A series of blog posts leveraging CVE analysis and patch diffing to discover new vulnerabilities. As revealed in the blog posts, 4 CVEs came from the in-depth study of CVE-2021-1657. TOC Results from CVE-2021-1657: Part 1 - Patch Diffing In The Dark Part 2 - Down the...
auto-repeater
AutoRepeater: Automated HTTP Request Repeating With Burp Suite tl;dr Within extender import AutoRepeater.jar Some Brief Instructions AutoRepeater will only resend requests which are changed by a defined replacement. When AutoRepeater receives a request that matches the conditions set for a given...
Cybersecurity-Books
Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep...
bug-bounty-standards
What is This Repository? This repository is a list of situations that occur in bug bounty programs and how they should be handled. Many of these are currently handled on a case-by-case basis, which leads to a lot of uncertainty and frustration from hackers, program owners and platforms. The goal ...
