Skip to content
View mugyuyu's full-sized avatar

Block or report mugyuyu

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

Describe how to use ffuf different options with examples

89 12 Updated Dec 11, 2022

A collection of snippets of codes and commands to make your life easier!

Shell 2,824 481 Updated Sep 25, 2023

CORSER is a Golang CLI Application for Advanced CORS Misconfiguration Detection

Go 60 7 Updated Oct 26, 2024

A tool to fastly get all javascript sources/files

Go 840 115 Updated Jul 4, 2025

A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing s…

Java 2,371 238 Updated Oct 30, 2023

Delve into a comprehensive checklist, your ultimate companion for Android app penetration testing. Identify vulnerabilities in network, data, storage, and permissions effortlessly. Boost security s…

360 74 Updated Oct 20, 2024

Tips and Tutorials for Bug Bounty and also Penetration Tests.

1,603 386 Updated Oct 7, 2025

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

JavaScript 2,229 218 Updated Nov 29, 2024

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Go 1,686 126 Updated May 22, 2024
99 43 Updated Mar 6, 2023

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Python 5,789 966 Updated May 27, 2025

All about bug bounty (bypasses, payloads, and etc)

6,500 1,233 Updated Sep 8, 2023

A Series of Tweets

15 4 Updated Jan 30, 2024

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

2,412 496 Updated Nov 16, 2024

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

Python 1,420 175 Updated Oct 17, 2025

Contextual Content Discovery Tool

Go 3,007 328 Updated Apr 29, 2024

Continuously jam all wifi clients/routers

Python 4,183 798 Updated Jul 20, 2024

An IIS short filename enumeration tool

Go 1,023 105 Updated Nov 25, 2024

Pentesting Android Application Course For Kids+ (English and Vietnamese edition)

Python 504 172 Updated Nov 22, 2022

Automated All-in-One OS Command Injection Exploitation Tool.

Python 5,514 901 Updated Nov 10, 2025

Enumerate the permissions associated with AWS credential set

Python 1,199 187 Updated Feb 5, 2024

CORS Misconfiguration Scanner

Python 1,475 188 Updated Sep 17, 2022

Find broken links, missing images, etc within your HTML.

JavaScript 2,047 306 Updated Jan 8, 2024

PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.

JavaScript 1,231 113 Updated Aug 7, 2024

Common Web Managers Fuzz Wordlists

175 43 Updated Sep 7, 2025

Android Reverse-Engineering Workbench for VS Code

TypeScript 3,615 305 Updated Nov 11, 2025

XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.

HTML 314 80 Updated Jun 1, 2022

A collection of tools to perform searches on GitHub.

Python 1,445 363 Updated Feb 9, 2023
Next