Pinned Repositories
0xsp-Mongoose
Privilege Escalation Enumeration Toolkit (64/32 ) , fast , intelligent enumeration with Web API integration . Mastering Your Own Finding
abaddon
AllAboutBugBounty
All about bug websites (bypasses, payloads, and etc)
Apache-Solr-RCE
Apache Solr Exploits 🌟
Apache-Solr-RCE-via-Velocity-template
hacker-roadmap
:pushpin: A guide for amateurs pen testers and a collection of hacking tools, resources and references to practice ethical hacking, pen testing and web security.
pcc
PHP Secure Configuration Checker
pentest-tools
Custom pentesting tools
vulhub
Pre-Built Vulnerable Environments Based on Docker-Compose
webshell
This is a webshell open source project
doanhnhq's Repositories
doanhnhq/AllAboutBugBounty
All about bug websites (bypasses, payloads, and etc)
doanhnhq/API-Security-Checklist
Checklist of the most important security countermeasures when designing, testing, and releasing your API
doanhnhq/AutoRDPwn
The Shadow Attack Framework
doanhnhq/Bug-Bounty-Toolz
BBT - Bug Bounty Tools
doanhnhq/BurpBountyPlus
BurpBounty 魔改版本
doanhnhq/BurpSuitePro-2.1
什么? 你想用免费的BurpSuitePro版本!!!
doanhnhq/chaos-public-program-list
Source for bug bounty programs available on Chaos website.
doanhnhq/CloudPentestCheatsheets
This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.
doanhnhq/CVE-2020-1472
Test tool for CVE-2020-1472
doanhnhq/dalfox
DalFox(Finder Of XSS) / Parameter Analysis and XSS Scanning tool based on golang
doanhnhq/design-resources-for-developers
Curated list of design and UI resources from stock photos, web templates, CSS frameworks, UI libraries, tools and much more
doanhnhq/doanhnhq.github.io
doanhnhq/gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
doanhnhq/Github-Monitor
Github Sensitive Information Leakage Monitor(Github信息泄漏监控系统)
doanhnhq/HowToHunt
Some Tutorials and Things to Do while Hunting That Vulnerability.
doanhnhq/injection
Windows process injection methods
doanhnhq/Java-Deserialization-Cheat-Sheet
The cheat sheet about Java Deserialization vulnerabilities
doanhnhq/keys
doanhnhq/KingOfBugBountyTips
doanhnhq/ParamSpider
Mining parameters from dark corners of Web Archives
doanhnhq/Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等，欢迎补充、完善---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
doanhnhq/posta
🐙 Cross-document Messaging security research tool
doanhnhq/profiles
doanhnhq/QuasarRAT
Remote Administration Tool for Windows
doanhnhq/rmiscout
RMIScout uses wordlist and bruteforce strategies to enumerate Java RMI functions and exploit RMI parameter unmarshalling vulnerabilities
doanhnhq/SMBGhost_RCE_PoC
doanhnhq/SonarSearch
A MongoDB importer and API for Project Sonars DNS datasets
doanhnhq/static-analysis
Static analysis tools for all programming languages, build tools, config files and more.
doanhnhq/SwiftnessX
A cross-platform note-taking & target-tracking app for penetration testers.
doanhnhq/vulfocus
🚀Vulfocus 是一个漏洞集成平台，将漏洞环境 docker 镜像，放入即可使用，开箱即用。