Repo for preparing for OSCE but to learn more about exploit development

In-depth Attack Surface Mapping and Asset Discovery

Penetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet

jwt-hack is JWT hacking, security testing utility

🌘🦊 DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

A collection of hacks and one-off scripts

Fetch many paths for many hosts - without killing the hosts

Some 2020 poc

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

A collection of awesome one-liner scripts especially for bug bounty tips.

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection

OSCP Buffer Overflow cheat sheet

Powerfull XSS Scanning and Parameter analysis tool&gem

The Bug Hunters Methodology

Find domains and subdomains related to a given domain

Take a list of domains and probe for working HTTP and HTTPS servers

The format of various s3 buckets is convert in one format. for bugbounty and security testing.

Automated NoSQL database enumeration and web application exploitation tool.

Modified template for the OSCP Exam and Labs. Used during my passing attempt

Make JSON greppable!

HTTP parameter discovery suite.

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and re…

Don't let buffer overflows overflow your mind

This repo contains my pentesting template that I have used in PWK and for current assessments. The template has been formatted to be used in Joplin

Mining parameters from dark corners of Web Archives

Fetch all the URLs that the Wayback Machine knows about for a domain