⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

A curated list of various bug bounty tools

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

A python tool used to discover endpoints (and potential parameters) for a given target

Burp Suite Certified Practitioner Exam Study

Study notes for the Certified Ethical Hacker v12.

Potentially dangerous files

Automating situational awareness for cloud penetration tests.

My cheatsheet notes to pentest AWS infrastructure

오펜시브 시큐리티 TTP, 정보, 그리고 대응 방안을 분석하고 공유하는 프로젝트입니다. 정보보안 업계 종사자들과 학생들에게 도움이 되었으면 좋겠습니다.

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

Browser In The Browser (BITB) Templates

Rockyou for web fuzzing

This is go CLI tool for send fast Multiple get HTTP request.

E-mails, subdomains and names Harvester - OSINT

declutters url lists for crawling/pentesting

oneliner commands for bug bounties

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

HTTP parameter discovery suite.

A repository with 3 tools for pwn'ing websites with .git repositories available

Fast web fuzzer written in Go

A Fuzzer for OpenRedirect issues

My CTFs

Fetch all the URLs that the Wayback Machine knows about for a domain

A wrapper around grep, to help you grep for things

Gospider - Fast web spider written in Go

Mind-Maps of Several Things

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

All about bug bounty (bypasses, payloads, and etc)