EdOverflow

bugbounty-cheatsheet. A list of interesting payloads, tips and tricks for bug bounty hunters.

can-i-take-over-xyz. "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

bugbountyguide. Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.

megplus. Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]

contact.sh. An OSINT tool to find contacts in order to report security vulnerabilities.

bugbountywiki. The Bug Bounty Wiki

proof-of-concepts. A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.

hacks. Some random scripts. Just trying to be like the cool kids.

bug-bounty-responses. A collection of response templates for invalid bug bounty reports.

legal-bug-bounty. #legalbugbounty project — creating safe harbors on bug bounty programs and vulnerability disclosure programs. Authored by Amit Elazari.

smith. Simple wrapper for meg that sieves through meg's output for you.

security-template. A static website template for security pages.

curate. A tool for fetching archived URLs (to be rewritten in Go).

h1-cli. A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.

security-policy-specification-standard. This document proposes a way of standardising the structure, language, and grammar used in security policies.

hunter. Guidelines for writing secure code for Python developers.

cryptojourney-content. Learn the basics of cryptography throughout history.

bounty-formula. A formula to calculate bounty amounts.

swiss-bugbounty-programs. List of bug bounty programs of companies/organisations in Switzerland

hack-your-university. A list of universities with vulnerability disclosure policies

propaganda. Generate a personal Jekyll website using your Bibtex references.

bounty-pls. A Chrome extension that spices up those #togetherwehitharder tweets.

hackerone-security-policy. This is the security policy for https://hackerone.com/ed.

society-website. Website source for the WMG Cyber Society.

sapp. Post Processor for Facebook Static Analysis Tools.

slides. Slides from my past talks.

edoverflow.

netkit-jh-build. Build scripts for the kernel, filesystem and assisting scripts/programs for Netkit-JH.

.gitignore. 🤔

netkit-jh.github.io. Netkit-JH documentation