Repositories list

• PoC-in-GitHub

  Public
  📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

  1.2k•0•0•0•Updated Sep 12, 2024Sep 12, 2024

• Recon

  Public
  1•0•0•0•Updated Aug 29, 2024Aug 29, 2024

• EmailFinder

  Public
  Email OSINT tool

  Shell

  •3•0•0•0•Updated Aug 2, 2024Aug 2, 2024

• linkThrasher

  Public
  Python

  •1•0•0•0•Updated Jul 31, 2024Jul 31, 2024

• openapi-directory

  Public
  🌐 Wikipedia for Web APIs. Directory of REST API definitions in OpenAPI 2.0/3.x format

  Creative Commons Zero v1.0 Universal

  •578•0•0•0•Updated Jul 28, 2024Jul 28, 2024

• nuclei_poc

  Public
  Nuclei POC，每日更新 | 自动整合全网Nuclei的漏洞POC，实时同步更新最新POC，保存已被删除的POC。通过批量克隆Github项目，获取Nuclei POC，并将POC按类别分类存放，使用Github Action实现（已有11wPOC，已校验有效性并去重）

  Python

  •

  Creative Commons Zero v1.0 Universal

  •214•0•0•0•Updated Jul 23, 2024Jul 23, 2024

• Nday-Exploit-Plan

  Public
  历史漏洞的细节以及利用方法汇总收集

  C

  •

  GNU General Public License v3.0

  •16•0•0•0•Updated Jul 23, 2024Jul 23, 2024

• poc-exp

  Public
  Discuss POC and Exp

  Python

  •25•0•0•0•Updated Jul 23, 2024Jul 23, 2024

• bug-bounty-domains

  Public
  Domains belonging to the most reputed public bug bounty programs.

  50•0•0•0•Updated Jul 20, 2024Jul 20, 2024

• BugBountyReportTemplates

  Public
  List of reporting templates I have used since I started doing BBH.

  56•0•0•0•Updated Jul 17, 2024Jul 17, 2024

• GiamSatTrungAp_BE

  Public
  C#

  •1•0•0•0•Updated Jul 17, 2024Jul 17, 2024

• bounty-targets-data

  Public
  This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

  MIT License

  •588•1•0•0•Updated Jul 17, 2024Jul 17, 2024

• h1domains

  Public
  HackerOne "in scope" domains

  Python

  •117•1•0•0•Updated Jul 17, 2024Jul 17, 2024

• h1_asset

  Public
  HackerOne资产更新 | 每日更新HackerOne资产，对HackerOne的资产进行爬行和整理，SRC资产更新仅会增加，不会进行删除，每天更新的可以进行差异化对比来获取到新的项目资产范围

  Python

  •

  Creative Commons Zero v1.0 Universal

  •114•1•0•0•Updated Jul 17, 2024Jul 17, 2024

• MyFIle

  Public
  MyPrivte

  JavaScript

  •2•1•0•0•Updated Jul 12, 2024Jul 12, 2024

• Hunting-automation

  Public
  Bug-bounty helper

  Python

  •

  Creative Commons Zero v1.0 Universal

  •2•0•0•0•Updated Jul 11, 2024Jul 11, 2024

• AllinOne

  Public
  Python

  •

  GNU General Public License v3.0

  •2•0•0•0•Updated Jul 7, 2024Jul 7, 2024

• H1-Scopy

  Public
  Hackerone API Integeration

  Python

  •2•0•0•0•Updated Jul 2, 2024Jul 2, 2024

• SecurityBoard

  Public
  My personal wordlist for the fuzzing phases during the pentetration tests.

  JavaScript

  •1•1•0•0•Updated Jun 21, 2024Jun 21, 2024

• fuzz-utils

  Public
  A tool to automatically generate Foundry unit test cases from Echidna and Medusa failed properties

  Solidity

  •

  GNU Affero General Public License v3.0

  •4•0•0•0•Updated Jun 13, 2024Jun 13, 2024

• my-images

  Public
  collection of image docker

  Shell

  •2•0•0•0•Updated May 12, 2024May 12, 2024

• Ingram

  Public
  网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

  Python

  •

  GNU General Public License v3.0

  •279•1•0•0•Updated Apr 4, 2024Apr 4, 2024

• hackEmbedded

  Public
  This tool is used for backdoor,shellcode generation,Information retrieval and POC arrangement for various architecture devices

  Python

  •

  GNU General Public License v3.0

  •30•1•0•0•Updated Apr 4, 2024Apr 4, 2024

• JavaRce

  Public
  实战场景较通用的 Java Rce 相关漏洞的利用方式 | Common Exploitation Techniques for Java RCE Vulnerabilities in Real-World Scenarios

  Java

  •52•0•0•0•Updated Apr 4, 2024Apr 4, 2024

• PoC

  Public
  PoC. Severity critical.

  Ruby

  •18•1•0•0•Updated Jan 3, 2024Jan 3, 2024

• CTF-WriteUp

  Public
  CTF WriteUp

  Python

  •2•0•0•0•Updated Dec 26, 2023Dec 26, 2023

• KingOfBugBountyTips

  Public
  Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..

  Python

  •810•0•0•0•Updated Dec 12, 2023Dec 12, 2023

• Penetration-List

  Public
  Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-depth theory sections. Visit our Medium profile for more information.

  Python

  •188•1•0•0•Updated Dec 7, 2023Dec 7, 2023

• telegram-get-remote-ip

  Public
  Get IP address on other side audio call in Telegram.

  Python

  •212•0•0•0•Updated Nov 8, 2023Nov 8, 2023

• missing-cve-nuclei-templates

  Public
  Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

  Shell

  •

  MIT License

  •38•0•0•0•Updated Nov 8, 2023Nov 8, 2023