Write-ups for different challenges I did in this platform.
☆26May 25, 2021Updated 5 years ago
Alternatives and similar repositories for HackTheBox
Users that are interested in HackTheBox are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Repository for public artifacts related to the practice of secure code review☆12Nov 13, 2019Updated 6 years ago
- ☆11Sep 15, 2024Updated 2 years ago
- Slides from various conferences and talks I've given☆15Oct 12, 2025Updated last year
- Writeups for Hack The Box machines/challenges☆25Nov 4, 2021Updated 4 years ago
- ☆22Aug 9, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆21Apr 14, 2021Updated 5 years ago
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- Collection of Facebook Bug Bounty Writeups☆31Sep 16, 2023Updated 3 years ago
- ☆21Jul 14, 2025Updated last year
- Windows 7 Professional 7601 Service Pack 1 is vulnerable to eternalblue exploit and while exploiting this myself i ran into a number of i…☆11Jun 27, 2021Updated 5 years ago
- ☆29Dec 12, 2024Updated last year
- Exploits for different vulnerabilities☆12Nov 29, 2021Updated 4 years ago
- DomainTrail is a fast subdomain enumeration tool that uses effective passive and active techniques.☆41Apr 18, 2024Updated 2 years ago
- List of Google dorks to find VDPs and Bug Bounty Programs☆35Jan 3, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- HackTheBox themed linux box config and automated setup.☆12Sep 3, 2025Updated last year
- gup aka Get All Urls parameters to create wordlists for brute forcing parameters.☆18Dec 4, 2021Updated 4 years ago
- Test Android Application.☆20Jan 22, 2016Updated 10 years ago
- Using the Vulnerable Bank App project to teach Engineers how to automate security testing of vulnerable applications in the CI/CD Pipelin…☆13Apr 14, 2026Updated 6 months ago
- Start Bug Bounty Hunting & earn some $$$$☆34Mar 29, 2024Updated 2 years ago
- ☆19Oct 16, 2026Updated 2 weeks ago
- Insecure Vulnerable Android Application that helps to learn hacing and securing apps☆21Oct 4, 2015Updated 11 years ago
- Convert KeePass (KDBX) password databases to John the Ripper format. Supports KeePass 1.x, 2.x, 3.x and 4.x formats while preserving encr…☆38Apr 16, 2026Updated 6 months ago
- Resources, scripts, and overviews of the knowledge I collect going through Offensive Security's macOS Exploit Development course.☆51Oct 6, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Get newest public disclosed HackerOne report notifications on your Desktop☆15Jan 29, 2020Updated 6 years ago
- I used the Templater community plugin in obsidian to automatically populate IP,username,password☆44Sep 11, 2023Updated 3 years ago
- Integrate static security testing with HCL AppScan on Cloud using GitHub Actions☆13Oct 14, 2026Updated 2 weeks ago
- Collection of some pentesting and bugbounty resources☆50Feb 5, 2022Updated 4 years ago
- Subvenkon is a subdomain enumerator from Venkon☆22Jun 22, 2020Updated 6 years ago
- Ragno is a Passive URL Crawler | Written in Python3 | Fetches URLs from the Wayback Machine, AlienVault's Open Threat Exchange & Common C…☆20Sep 1, 2025Updated last year
- sonarbyte is a simple and fast subdomain scanner written in go to extract subdomain from Rapid7's DNS Database using omnisint's api.☆26Sep 4, 2022Updated 4 years ago
- My Powershell notes☆16Sep 27, 2022Updated 4 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆17Sep 29, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- List of payloads: reverse shell, bind shell, webshell.☆16Feb 26, 2022Updated 4 years ago
- All About XSS☆16Oct 23, 2022Updated 4 years ago
- ☆21May 25, 2025Updated last year
- ☆24Jul 24, 2023Updated 3 years ago
- shellshock CVE-2014-6271 CGI Exploit, Use like Openssh via CGI☆13Oct 2, 2014Updated 12 years ago
- A list of useful payloads and bypass for Web Application Security and Pentest/CTF☆20Feb 26, 2021Updated 5 years ago
- High-performance JavaScript reconnaissance tool with Aho-Corasick pattern matching for bug bounty hunters and security researchers☆11Jan 24, 2026Updated 9 months ago