Daniel Púa

nomore403. 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

awesome-ctf-resources. A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

XORpass. Encoder to bypass WAF filters using XOR operations.

debugHunter. Discover hidden debugging parameters and uncover web application secrets

CTF_OnlineTools. Repository to index useful online tools for CTF

put2win. Script to automate PUT HTTP method exploitation to get shell

pwny.cc. Repository of useful payloads and tips for pentesting/bug bounty.

unaalmes-writeups. Repository to save all write-ups from UAM challenges

SubProbe. ⚡ JavaScript-aware crawler for security researchers and bug bounty hunters. Extract hidden endpoints and internal subdomains through static and semantic analysis of JS files. Lightweight. Fast. Sneaky.

pentesting-wiki. I am tired of cherrytree and I think that having useful information online to consult comfortably can be a good option. Feel free to send corrections / extra tips.

jwtforge. Attacker-minded, 100% client-side JWT toolkit — decode, audit & forge tokens. Generates alg:none, key-confusion, kid-injection & brute-force attacks with ready-to-run curl/Burp/nuclei exports. The security alternative to jwt.io.

devploit.

old_devploit.github.io. devploit's linktree

ctf-writeups. Repository to store public writeups from some CTFs.

blog. SCSS

pwnygames_2021. TODO