JustTryHarder

JustTryHarder JustTryHarder is a cheat sheet which will aid you through the PWK course & the OSCP Exam. Inspired by PayloadAllTheThings Feel free to submit a Pull Request & leave a star to share some love if this helped you. 💖 Hacktoberfest friendly! Yes, we are open to Pull Requests for...

CheatSheetSeries

Welcome to the OWASP Cheat Sheet Series Welcome to the official repository for the Open Worldwide Application Security Project® OWASP Cheat Sheet Series project. The project focuses on providing good security practices for builders in order to secure their applications. In order to read the cheat...

DefaultCreds-cheat-sheet

Default Credentials Cheat Sheet One place for all the default credentials to assist pentesters/blue Teamers during engagements, featuring default login/password details for various products sourced from multiple references. P.S : Most of the credentials were extracted from changeme,routersploit a...

Privilege-Escalation

⬆️ Élévation de Privilèges pour Pentesteurs Un aide-mémoire pratique et guide de référence sur l'élévation de privilèges conçu pour les joueurs de CTF, les testeurs d'intrusion et les apprenants en cybersécurité afin de comprendre comment les attaquants élèvent leurs privilèges sur des systèmes...

flare-floss

FLOSS Scripts FLOSS supports converting its output into scripts for various tools. Please see the render scripts in this directory. Additionally, there is another plugin for IDA to allow FLOSS to automatically extract obfuscated strings and apply them to the currently loaded module in IDA...

Cybersec

Offensive CyberSec Cheat Sheet A highly dynamic, single-file HTML cheat sheet designed for Red Teamers, Pentesters, and CTF players. Tired of typing the same Reverse Shell payloads and constantly replacing your local IP and port? This tool eliminates the "Typo Fatigue" and cognitive load during...

url-cheatsheet-data

Данные для шпаргалки по обходу валидации URL Эти данные используются в шпаргалке PortSwigger по обходу валидации URL. Мы разместили эти данные на Github, чтобы сообщество могло вносить векторы через pull request. Участие Чтобы внести вклад, создайте pull request с изменениями в JSON-данных...

Nmap-Cheat-Sheet

Шпаргалка по Nmap Выбор цели Nmap root@kitploit: Сканирование одного IP nmap 192.168.1.1 Сканирование хоста nmap www.testhostname.com Сканирование диапазона IP nmap 192.168.1.1-20 Сканирование подсети nmap 192.168.1.0/24 Сканирование целей из текстового файла nmap -iL list-of-ips.txt Выбор портов...

OSINT-Cheat-sheet

OSINT CHEAT SHEET - List OSINT Tools Contains a list of OSINT tools, OSINT tips, datasets, Maltego transform and others. There are free and paid tools you can use and owner is not responsible take your own risks, only for knowledge or educational purposes. Apologies if some of the resources are n...

bugbounty-cheatsheet

Bug Bounty Cheat Sheet 📚 Reference| 🔎 Vulnerabilities ---|--- Bug Bounty Platforms| XSS Books| SQLi Special Tools| SSRF Recon| CRLF Injection Practice Platforms| CSV Injection Bug Bounty Tips| LFI | XXE | RCE | Open Redirect | Crypto | Template Injection | Content Injection Contributing We welcom...

bincrypter

Privacy and copyright protection for your programs A Linux Binary Runtime Crypter - in BASH! Obfuscate & encrypt any ELF binary Obfuscate & encrypt any SHELL-script AV/EDR death: Morphing + different signature every time 100% in-memory. No temporary files Not soiling the filesystem Double or trip...

Pentest-Cheat-Sheet

ペンテスト チートシート 世の中には多くのチートシートがあるが、これは私のものだ。現在進行形のもので、頻繁に 、時々更新されるラフドラフトのようなものだ。OSCP の勉強中に作り始めたが、今ではレッドチーマーとして必要な、より実践的な内容へと進化している。新しい追加事項は試験ではおそらく役に立たないだろうし、禁止されているツールさえ含まれるかもしれない。 偵察 非常に不完全... Linux ローカル find / -name flag.txt はファイル名でファイルを探す。 grep -R "flag40" / -s -n...

BurpSuite-For-Pentester

🕷️ BurpSuite per Pentester Una pratica guida e cheat sheet su Burp Suite, progettata per bug bounty hunter e penetration tester per scoprire in modo efficiente vulnerabilità nelle applicazioni web, dalla severità bassa P4 a quella critica P1, usando Burp Suite. Questo repository fornisce un...

Metasploit-Simulation-lab

🛡️ Metasploit Simulation Lab — Ethical Hacking Training !alt...

XSS-cheat-sheet-txt-dictionary-by-PortSwigger

XSS cheat sheet dictionary by PortSwigger PortSwigger diction...

AWS VDP: Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy Violation

Asset URL: ██████ Summary: The AWS sign-in page allows users to reuse old passwords when resetting their password, which violates security best practices outlined in OWASP Authentication Cheat Sheet and NIST 800-63B Digital Identity Guidelines. This misconfiguration could potentially weaken accou...

xss-vectors-cheat-sheet

xss...

jingfan-ps.com Cross Site Scripting vulnerability OBB-4047583

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

northcentralhpba.org Cross Site Scripting vulnerability OBB-4043636

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

simbada.trenggalekkab.go.id Cross Site Scripting vulnerability OBB-4043541

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...