gh0sh

gh0sh's Stars

• nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters

  A list of resources for those interested in getting started in bug bounties

  11.1k2k

• OmGigitOm/git-cheatsheet

  2

• OmGigitOm/python-basic

  11

• reconness/reconness

  ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on schedule or events.

  Language:C#31936

• allyomalley/dnsobserver

  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for out-of-band DNS interactions and sends lookup notifications via Slack.

  Language:Go19031

• shmilylty/OneForAll

  OneForAll是一款功能强大的子域收集工具

  Language:Python8.7k1.3k

• asciimoo/wuzz

  Interactive cli tool for HTTP inspection

  Language:Go10.6k414

• fransr/postMessage-tracker

  A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

  Language:JavaScript1.1k159

• fransr/bountyplz

  Automated security reporting from markdown templates (HackerOne and Bugcrowd are currently the platforms supported)

  Language:Shell45266

• eldraco/domain_analyzer

  Analyze the security of any domain by finding all the information possible. Made in python.

  Language:Python1.9k242

• eur0pa/dirsearch-go

  A Go implementation of dirsearch.

  Language:Go439

• BugBountyResources/Resources

  A Storehouse of resources related to Bug Bounty Hunting collected from different sources. Latest guides, tools, methodology, platforms tips, and tricks curated by us.

  8919

• ffuf/ffuf

  Fast web fuzzer written in Go

  Language:Go13.6k1.4k

• orangetw/awesome-jenkins-rce-2019

  There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

  Language:Python602131

• Broly157/auto.sh

  This script is (Mainly) for Beginner's

  Language:Shell6233

• ClaudiuGeorgiu/PlaystoreDownloader

  A command line tool to download Android applications directly from the Google Play Store by specifying their package name (an initial one-time configuration is required)

  Language:Python1.2k220

• PDKT-Team/ctf

  CTF write-ups by PDKT team with English and Indonesian language

  Language:Python773

• tharina/BlackHoodie-2018-Workshop

  Slides and challenges for my binary exploitation workshop at BlackHoodie 2018.

  Language:C34155

• HarmJ0y/CheatSheets

  Cheat sheets for various projects.

  1k207

• Aniket965/Hello-world

  Add any Program in any language you like or add a hello world Program ❣️ if you like give us :star:

  Language:Jupyter Notebook1.5k2.8k

• Moham3dRiahi/XAttackProV30

  XAttacker Tool PRO V30 Website Vulnerability Scanner & Auto Exploiter

  468170

• DovAmir/awesome-design-patterns

  A curated list of software and architecture related design patterns.

  41.8k3k

• NgeSEC/SecStory

  SecStory (Security Story) adalah buku digital yang berisi kumpulan donasi cerita, ditulis oleh para pemangku kepentingan keamanan siber di Indonesia.

  7221

• k4m4/movies-for-hackers

  🎬 A curated list of movies every hacker & cyberpunk must watch.

  Language:Shell10.8k899

• ctfs/resources

  A general collection of information, tools, and tips regarding CTFs and similar security competitions

  1.8k275

• OWASP/Top10

  Official OWASP Top 10 Document Repository

  Language:HTML4.5k868

• WebGoat/WebGoat

  WebGoat is a deliberately insecure application

  Language:JavaScript7.3k6.1k

• shellphish/how2heap

  A repository for learning various heap exploitation techniques.

  Language:C7.6k1.2k

• OWASP/owasp-mastg

  The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).

  Language:Python12.1k2.4k

• freeCodeCamp/freeCodeCamp

  freeCodeCamp.org's open-source codebase and curriculum. Learn to code for free.

  Language:TypeScript413k39.4k