streaak

keyhacks. Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

pastebin-scraper. Pastebin-scraper tool leverages the API of https://psbdmp.ws/ to find emails/domains dumped in pastebin.

hacks. Small snippets and scripts which I use

bugbounty-cheatsheet. A list of interesting payloads, tips and tricks for bug bounty hunters.

big-list-of-naughty-strings. The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

SSRF-Testing. SSRF (Server Side Request Forgery) testing resources

hackpad. A web application hacker's toolbox. Base64 encoding/decoding, URL encoding/decoding, MD5/SHA1/SHA256/HMAC hashing, code deobfuscation, formatting, highlighting and much more.

CRLF-Injection-Scanner. Command line tool for testing CRLF injection on list of domains.

github-search. Tools to perform basic search on GitHub.

hacks-1. A collection of hacks and one-off scripts

SubOver. A Powerful Subdomain Takeover Tool

oxml_xxe. A tool for embedding XXE/XML exploits into different filetypes

certasset. Takes ip range, Scan all open SSL Certs, Grab Cnames

ffmpeg-avi-m3u-xbin. Python

OSINT-Framework. OSINT Framework

ICU. An Extended, Modulair, Host Discovery Framework

CRLF-Injection-Payloads. Payloads for CRLF Injection

Java-Deserialization-Cheat-Sheet. The cheat sheet about Java Deserialization vulnerabilities

retire.js. scanner detecting the use of JavaScript libraries with known vulnerabilities

jwt_tool. :snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

heartbleed-poc. Test for SSL heartbeat vulnerability (CVE-2014-0160)

gen_report. A quick, customizeable report generator for HackeOne. Increases productivity & efficiency.

java_deserialization_exploits. A collection of Java Deserialization Exploits

APAC-Conferences. A community contributed consolidated list of InfoSec meetups in the Asia Pacific region.

h1-212-ctf-solutions. A collection of the solutions people wrote for the H1-212 Capture The Flag event