A tool that automates the search for IDOR vulnerabilities in web apps and APIs

Repo for ADACLScan.ps1 - Your number one script for ACL's in Active Directory

Automated All-in-One OS Command Injection Exploitation Tool.

Tool to help exploit XXE vulnerabilities

CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting infor…

Interview questions to screen offensive (red team/pentest) candidates

Top 100 Hacking & Security E-Books (Free Download) - Powered by Yeahhub.com

This repository was created and developed by Ammar Amer @cry__pto Only. Updates to this repository will continue to arrive until the number of links reaches 2000 links & 2000 pdf files at any time …

Nakerah-lab

Bugbounty Resources

Cocaine is a Music Player made with Kotlin

Snaptick is an MVVM Jetpack Compose app, offering ad-free task management with a built-in pomodoro timer to help you organize your daily plans

dydx v4 protocol

A small command-line utility to artificially limit the input rate to STDIN.

OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec (v2, v3)

A wrapper around grep, to help you grep for things

A collection of hacks and one-off scripts

Find domains and subdomains related to a given domain

Fetch many paths for many hosts - without killing the hosts

A proposed standard that allows websites to define security policies.

Recon on some public sites

Gospider - Fast web spider written in Go

Cloudflare Turnstile solving API

Change the appearance of the web instantly

Bug Bounty Tools used on Twitch - Recon

A collection of PDF/books about the modern web application security and bug bounty.