Puliczek / awesome-list-of-secrets-in-environment-variables

Related projects ⓘ

Alternatives and complementary repositories for awesome-list-of-secrets-in-environment-variables

• 0xsha / CloudBrute
  Awesome cloud enumerator
  ☆895Updated 3 months ago
• laluka / bypass-url-parser
  bypass-url-parser
  ☆1,023Updated last week
• carlospolop / PurplePanda
  Identify privilege escalation paths within and across different clouds
  ☆668Updated 2 weeks ago
• httpvoid / writeups
  ☆1,177Updated 2 years ago
• p0dalirius / Awesome-RCE-techniques
  Awesome list of step by step techniques to achieve Remote Code Execution on various apps!
  ☆1,851Updated last year
• devploit / nomore403
  Tool to bypass 403/40X response codes.
  ☆1,113Updated 3 months ago
• initstring / cloud_enum
  Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
  ☆1,688Updated last month
• Puliczek / CVE-2021-44228-PoC-log4j-bypass-words
  🐱‍💻 ✂️ 🤬 CVE-2021-44228 - LOG4J Java exploit - WAF bypass tricks
  ☆935Updated 2 years ago
• Hackmanit / Web-Cache-Vulnerability-Scanner
  Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…
  ☆877Updated this week
• ayoubfathi / leaky-paths
  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…
  ☆936Updated 4 months ago
• GrrrDog / weird_proxies
  Reverse proxies cheatsheet
  ☆1,782Updated last year
• devanshbatham / FavFreak
  Making Favicon.ico based Recon Great again !
  ☆1,128Updated last year
• mazen160 / secrets-patterns-db
  Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
  ☆1,048Updated 9 months ago
• dafthack / CloudPentestCheatsheets
  This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…
  ☆2,576Updated 2 months ago
• iangcarroll / cookiemonster
  🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.
  ☆835Updated last month
• gquere / pwn_jenkins
  Notes about attacking Jenkins servers
  ☆1,966Updated 4 months ago
• projectdiscovery / cloudlist
  Cloudlist is a tool for listing Assets from multiple Cloud Providers.
  ☆861Updated this week
• glitchedgitz / cook
  A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.
  ☆1,040Updated 7 months ago
• rootsecdev / Azure-Red-Team
  Azure Security Resources and Notes
  ☆1,486Updated 5 months ago
• trickest / wordlists
  Real-world infosec wordlists, updated regularly
  ☆1,400Updated this week
• punishell / bbtips
  BugBountyTips
  ☆403Updated 5 months ago
• hakluke / hakoriginfinder
  Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
  ☆845Updated 10 months ago
• assetnote / wordlists
  Automated & Manual Wordlists provided by Assetnote
  ☆1,328Updated 3 months ago
• cfalta / MicrosoftWontFixList
  A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. T…
  ☆939Updated 3 years ago
• ihebski / A-Red-Teamer-diaries
  RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
  ☆1,739Updated 5 months ago
• stealthcopter / deepce
  Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)
  ☆1,207Updated 5 months ago
• six2dez / pentest-book
  ☆1,581Updated last month
• yeswehack / PwnFox
  PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.
  ☆1,065Updated 3 months ago
• BishopFox / jsluice
  Extract URLs, paths, secrets, and other interesting bits from JavaScript
  ☆1,424Updated 6 months ago
• hackerscrolls / SecurityTips
  ☆990Updated 2 years ago