An Intentionally designed Vulnerable Android Application built in Kotlin.

翻墙-科学上网、免费翻墙、免费科学上网、VPN、一键翻墙浏览器，vps一键搭建翻墙服务器脚本/教程，免费shadowsocks/ss/ssr/v2ray/goflyway账号/节点，免费自由上网、fanqiang、翻墙梯子，电脑、手机、iOS、安卓、windows、Mac、Linux、路由器翻墙、科学上网

This repo contains write ups of vulnerabilities I've found and exploits I've publicly developed.

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

抖音去水印批量下载用户主页作品、喜欢、图文、音频

搭建 SS/SSR/V2Ray/Socks5 透明代理环境的简易脚本

Generates combination of domain names from the provided input.

A quick tool for performing an export of your HackerOne program reports to ThreadFix

OnionScan is a free and open source tool for investigating the Dark Web.

GitHub Satellite 2020 workshops on finding security vulnerabilities with CodeQL for Java/JavaScript.

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

Machine Learning for Cyber Security

This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.

XSS payloads for bypassing WAF. This repository is updating continuously.

WordPress Plugin Update Confusion

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

Protect against subdomain takeover

Some files for bruteforcing certain things.

Bug Bounty Roadmaps

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

windows kernel security development

My curated list of awesome links, resources and tools on infosec related topics

Pentest/BugBounty progress control with scanning modules

⛔ offsec batteries included

A script that you can run in the background!