I talk and teach about #infosec #cybersecurity #ethicalhacking #bugbounty
bugbountyDorks. This repo contains all the Bug Bounty Dorks sourced from different awesome sources and compiled at one place
266clickjackingpoc. A Proof of Concept for Clickjacking Attacks
69Can-I-take-over-xyz-v2.
57shodandorks.
53chaos-hunt. Bash Script to Hunt all the targets/Subdomains from Chaos by Project Discovery Team
36NoRLCheck. Quick and dirty script to check for No RL
32githubdorks.
18nuclei-templates-all. Bash Script to download all Nuclei Templates from different awesome sources
12f5BigIPExploit.
9CVE-2020-13942-POC-. CVE-2020-13942 POC + Automation Script
9pegasus. Samples for Pegasus by NSO
8clickjack. Web based clickjack poc creator tool in python
7Example-Dapp. A simple Dapp
6vps-new. Dockerfile
6ParityMultisigWalletHack. A simple Proof of Concept showing the Parity Multisig Wallet Hack, with hardhat and mocha
5csvinjection. csvinjection
5waybackurlsbash. crawling urls for targets from wayback implementation in bash.
4detections. This repo will contain detection for different CMS, Softwares and Services.
4bbv3.sh. Shell
3nmap-xml-to-csv-parser. Python
3Bug-Bounty-AI-Prompts.
3githubleak. This is an intentional vulnerable github repo for demo
3Frida-Scripts. Useful Frida Scripts
3best-dns-wordlist. DNS Bruteforce
2lfi-php-writer-shellcode. PHP
2pythonprojects-CVE-2018-10933. CVE-2018-10933
2LinkedIn-B0t. Ever thought what does that, 500+ Connections look like. Dont worry you can also add them now! Thanks to LinkedIn-b0t.
2XSS-Fuzzer. Python
2betatakeover. This is the POC of a Subdomain TKO
1AI-Mobile-Bootcamp-Resources. AI Mobile Pentesting Bootcamp Resources
1burpfakeip. Python
1subdomain-finder. Identify Subdomains for target from various passive data sources implemented in bash
1Bsides-Training. Labs
1Re-entrancy-Vulnerability. A simple Proof of Concept demonstrating the Re-entrancy Vulnerability
1Subbrute.sh. Shell
1SE-Exploiting-Autofills. SE : Here is the demonstration on how you can exploit the Autofill Option in the Browsers.
1urlstodomain. Extract domain names from a large mixed list of crawled urls implemented in bash
1