osamahamad

archivesuburls

Simple tool to extract target subdomains + URLs from Wayback Machine

c99api-reconnaissance

Bash script to interact with c99.nl API specific for web pen testers recon assessment.

CVE-2020-5410-POC

CVE-2020-5410 Spring Cloud Config directory traversal vulnerability

CVE-2020-9484-Mass-Scan

CVE-2020-9484 Mass Scanner, Scan a list of urls for Apache Tomcat deserialization (CVE-2020-9484) which could lead to RCE

FUZZING

Collected fuzzing payloads from different resources

Interesting-Things

Single-WebApp-Target essentials testing methodology tool starting at recon-information gathering for the juicy stuff ended up in exploitation.

payout-targets-data

Provides public bug bounty programs in-scope data that offer rewards and monitors public bug bounty programs assets.

public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

RPR-Run-Pause-Resume

Credential-guessing enhancement to BurpSuite/Turbo-Intruder which implements pauses during attack runs

Sensitive-Data-Exposures-with-Github

Techniques / Tips and tricks for finding sensitive data exposures in Github for Penetration Testers / Bug Bounty Hunters

osamahamad/FUZZING

Collected fuzzing payloads from different resources

osamahamad/payout-targets-data

Provides public bug bounty programs in-scope data that offer rewards and monitors public bug bounty programs assets.

osamahamad/Interesting-Things

Single-WebApp-Target essentials testing methodology tool starting at recon-information gathering for the juicy stuff ended up in exploitation.

osamahamad/public-pentesting-reports

Curated list of public penetration test reports released by several consulting firms and academic security groups

osamahamad/golang-training

Training for Golang

osamahamad/hackerone-reports

Top disclosed reports from HackerOne

osamahamad/tryhackme-ctf

TryHackMe CTFs writeups, notes, dratfs, scrabbles, files and solutions.

osamahamad/ars0n-framework

A Modern Framework for Bug Bounty Hunting

osamahamad/Awesome-RCE-techniques

Awesome list of techniques to achieve Remote Code Execution on various apps!

osamahamad/Awesome-Smart-Contract-Security

A curated list of Smart Contract Security materials and resources For Researchers

osamahamad/axiom

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

osamahamad/bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

osamahamad/bug-bounty-platforms

A community-powered collection of all known bug bounty platforms, vulnerability disclosure platforms, and crowdsourced security platforms currently active on the Internet.

osamahamad/cdn-185-199-109-153

test

osamahamad/CloakQuest3r

CloakQuest3r but without prompts

osamahamad/concurl-following-redirects

adding -L just to let it follow redirects

osamahamad/cypress

Fast, easy and reliable testing for anything that runs in a browser.

osamahamad/kenzer-templates

osamahamad/osamahamad.github.io

Gesko is a simple and minimalistic jekyll blogging theme.

osamahamad/OSCP-Prep-cheatsheet

osamahamad/osm-demo

Osmedeus demo workflow

osamahamad/recon

Simple recon app in Rails

osamahamad/requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

osamahamad/sa-mobile-sdk-android

osamahamad/ShadowClone

Unleash the power of cloud

osamahamad/subzy

Subdomain takeover vulnerability checker

osamahamad/tls-scan

An Internet scale, blazing fast SSL/TLS scanner ( non-blocking, event-driven )

osamahamad/unpack-burp

For unpacking base64:ed "Save items"-content from Burp (From search + proxy history)

osamahamad/webHunt

Web App bug hunting

osamahamad/wordpress-pubsubhubbub

WebSub/PubSubHubbub for WordPress