Ebrahem Hegazy

JSONBee. A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

ArabicWebAppsPentesting. This repo will contain POC, demo files, and any links given during the Arab web application penetration testing course.

webpwn3r. WebPwn3r - Web Applications Security Scanner.

Pemburu. Pemburu AKA GoldDigger.

MS15-034. POC MS15-034

Fortigate-RCE-Backdoor. This is a POC for the Fortigate OS Backdoor found in version 4.x up to 5.0.7

RedTeaming_Sessions. This repo contains the slides of the y redteaming sessions on my Youtube channel.

zigoo0.github.io. www.sec-down.com

Depix. Recovers passwords from pixelized screenshots

keyhacks. Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

wp-hpp.github.io. WorldPay

testrepo. JavaScript

mcfridafee. Python

temp.

Oracle-BI-bugs.

AmsiScanBufferBypass. Circumvent AMSI by patching AmsiScanBuffer

html-poc. Proof of concept code for client-side vulnerabilities

Grafana-CVE-2021-43798. Grafana Unauthorized arbitrary file reading vulnerability