A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
☆166Nov 6, 2019Updated 6 years ago
Alternatives and similar repositories for proof-of-concepts
Users that are interested in proof-of-concepts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Bug Bounty Guide is a launchpad for bug bounty programs and bug bounty hunters.☆472Nov 10, 2022Updated 3 years ago
- An OSINT tool to find contacts in order to report security vulnerabilities.☆269Jan 27, 2020Updated 6 years ago
- This document proposes a way of standardising the structure, language, and grammar used in security policies.☆26Jan 29, 2018Updated 8 years ago
- A formula to calculate bounty amounts.☆15Dec 2, 2017Updated 8 years ago
- Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]☆305Oct 14, 2018Updated 8 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Some random scripts. Just trying to be like the cool kids.☆100Jul 1, 2018Updated 8 years ago
- A python script that filters, checks the validity, generates clickable link(s) of subdomain(s), and reports their status☆87Oct 29, 2020Updated 6 years ago
- A Firefox extension and WebSocket handler that checks S3/Google/Azure buckets while your browse.☆37Jul 10, 2020Updated 6 years ago
- A tool to generate media files with malicious metadata☆128Feb 2, 2019Updated 7 years ago
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆6,575Sep 14, 2023Updated 3 years ago
- A CLI tool to interact with hackerone.com. This was my submission for HackerOne's Summer 2018 Hack Day.☆42Aug 2, 2018Updated 8 years ago
- A small tool that extracts relative URLs from a file.☆768Sep 23, 2020Updated 6 years ago
- A cheat sheet for pentesters and researchers about vulnerabilities in well-known monitoring systems.☆168Jun 10, 2021Updated 5 years ago
- A collection of response templates for invalid bug bounty reports.☆90Feb 26, 2018Updated 8 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.☆5,834Feb 8, 2025Updated last year
- Guidelines for writing secure code for Python developers.☆22Apr 23, 2017Updated 9 years ago
- Simple tool to test for SSRF/OOB HTTP Read within the Path of a request☆30Aug 2, 2019Updated 7 years ago
- The Bug Bounty Wiki☆174Oct 31, 2018Updated 7 years ago
- A static website template for security pages.☆55Jul 19, 2025Updated last year
- Stealing CSRF tokens with CSS injection (without iFrames)☆320Feb 7, 2018Updated 8 years ago
- A highly configurable Framework for easy automated web scanning☆384Jul 13, 2020Updated 6 years ago
- Tools of "The Bug Hunters Methodology V2 by @jhaddix"☆202Aug 11, 2017Updated 9 years ago
- HTML5 Training material for Attack and Secure training sessions.☆42Feb 25, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Burp Suite extension for JAX-RS☆66Mar 17, 2017Updated 9 years ago
- Chef repository for pentesting tools☆13Mar 4, 2017Updated 9 years ago
- Python Remote Administration Tool☆15Jan 8, 2017Updated 9 years ago
- Misc. Public Reports of Penetration Testing and Security Audits.☆37Jan 8, 2021Updated 5 years ago
- Reconnaissance tool which scans javascript files for subdomains and then iterates over all javascript files hosted on subsequent subdomai…☆222Jul 10, 2020Updated 6 years ago
- Useful commands for infosec☆28Feb 13, 2023Updated 3 years ago
- ☆80Apr 20, 2021Updated 5 years ago
- A generic TCP payload proxy☆12Aug 22, 2026Updated 2 months ago
- Scans crossdomain.xml policies for expired domain names.☆26Aug 4, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This tool can be used to brute discover GET and POST parameters☆1,395Aug 24, 2019Updated 7 years ago
- Various Payload wordlists☆243Jul 31, 2026Updated 3 months ago
- blacksheepwall is a hostname reconnaissance tool☆298Apr 25, 2020Updated 6 years ago
- ISR-sqlget It's a blind SQL injection tool developed in Perl.☆14Apr 26, 2013Updated 13 years ago
- ☆279Oct 19, 2021Updated 5 years ago
- A script to enumerate virtual hosts on a server.☆698Dec 28, 2017Updated 8 years ago
- web-based-fuzzer☆31Jun 26, 2020Updated 6 years ago