xss development frameworks, with the goal of making payload writing easier.

EDR Lab for Experimentation Purposes

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Find way more from the Wayback Machine!

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal & Intelligence X!

Passive Reconnaissance Techniques Approach helps for penetration testing and bug bounty hunting by gathering information about a target system or network.

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp Suite

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

Collection of Cyber Threat Intelligence sources from the deep and dark web

Kerberos relaying and unconstrained delegation abuse toolkit

Not The Hidden Wiki - The largest repository of links related to cybersecurity

my kali desktop setup

Projects for security students

Linux Loadable Kernel Module (LKM) based rootkit (ring-0), capable of hiding itself, processes/implants, rmmod proof, has ability to bypass infamous rkhunter antirootkit.

Template for bootstraping ansible roles

Joomla! < 4.2.8 - Unauthenticated information disclosure

JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit

An overpower wordlist generator, splitter, merger, finder, saver, create words permutation and combinations, apply different encoding/decoding and everything you need. Frustation Killer!!!

Rockyou for web fuzzing

Hacking Notes

Welcome Cybersecurity's World. An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github…

Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.

A next-generation crawling and spidering framework.

A next-generation crawling and spidering framework.

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

Original PoC for CVE-2023-32784

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports