Top disclosed reports from HackerOne

🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have created or Compiled/analysed🔥 to understand more about Malware threats😈, analysis and mitigation🧐.

Collection of malware source code for a variety of platforms in an array of different programming languages.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Most advanced XSS scanner.

Brute force a web target with different user-agents to see response from web server.

Small but effective wordlist for brute-forcing and discovering hidden things.

Public API Sample

A list of REST API URL paths for use in blackbox API end-point discovery

The XSS Hunter service - a portable version of XSSHunter.com

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

A cheatsheet for exploiting server-side SVG processors.

Exploiting misconfigured firebase databases

Audit git repos for secrets 🔑

A place where I can create, collect and share tooling, resources and knowledge about information security.

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

Sub-Domain TakeOver Vulnerability Scanner

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

A tool to dump a git repository from a website

A list of resources for those interested in getting started in bug bounties

✍️ A curated list of CVE PoCs.

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

REST API backend for Reconmap

An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

Some files for bruteforcing certain things.