tanprathan / owasp-mstg

Related projects ⓘ

Alternatives and complementary repositories for owasp-mstg

• codingo / bug-bounty-dorks
  List of Google Dorks for sites that have responsible disclosure program / bug bounty program
  ☆19Updated 5 years ago
• 1ndianl33t / BugBounty_Profile
  Recon_profile
  ☆36Updated 4 years ago
• jhaddix / megplus
  Automated reconnaissance wrapper — TomNomNom's meg on steroids.
  ☆30Updated 6 years ago
• jhaddix / sslScrape
  SSLScrape | A scanning tool for scaping hostnames from SSL certificates.
  ☆43Updated 5 years ago
• darkc0d37 / wordlistsbyNahamsec
  ☆36Updated 5 years ago
• shauryasharma-05 / The-Bounty-Dorks
  Now use your favorite Google Dorks techniques to find vulnerabilities and earn Bounties.
  ☆31Updated 4 years ago
• gwen001 / BBvuln
  A listing of the most common vuln that you can link in your PoCs
  ☆27Updated 6 years ago
• infinite-omicron / pentesting-checklist
  Penetration Testing Checklist
  ☆35Updated 4 years ago
• SaadAhmedx / Subdomain-Takeover
  ☆57Updated last year
• jhaddix / amass
  In-depth DNS Enumeration and Network Mapping
  ☆33Updated 5 years ago
• AdmiralGaust / bountyRecon
  Bash script to automate Bug Bounty Reconnaissance
  ☆37Updated 3 years ago
• bonino97 / LemonBooster-v2
  Reestructured LemonBooster.
  ☆44Updated 3 months ago
• yasinS / bug-bounty-reference
  Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
  ☆36Updated 7 years ago
• humblelad / Needle
  Instant access to you bug bounty submission dashboard on various platforms + publicly disclosed reports + #bugbountytip
  ☆20Updated 4 years ago
• ksharinarayanan / bash-hacks
  Handy bash and python scripts for bug bounty hunting!
  ☆47Updated 3 years ago
• DFC302 / BugBountyTemplate
  A simple Cherry Tree template that can be used to organize bug bounties
  ☆34Updated 5 years ago
• jhaddix / lazyrecon
  This script is intended to automate your reconnaissance process in an organized fashion
  ☆38Updated 6 years ago
• nahamsec / burpy
  Portable and flexible web application security assessment tool.It parses Burp Suite log and performs various tests depending on the modul…
  ☆33Updated 9 years ago
• jhaddix / LazyFuzzer
  Ease-of-use extension for Web Application penetration testing
  ☆21Updated 7 years ago
• enciphers-team / WebHacking-Training-Resources
  This repo hosts multiple codes, content, checklists etc which can help a penetration tester in a web application auditing.
  ☆21Updated last year
• stevemcilwain / secrets
  Offsec Pentest and Bug Bounty Notes
  ☆23Updated 4 years ago
• omkar-ukirde / api-pentesting
  API Pentesting notes.
  ☆96Updated last week
• jhaddix / can-i-take-over-xyz
  "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
  ☆36Updated 6 years ago
• th3hack3rwiz / Lazy-FuzzZ
  Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the …
  ☆51Updated 3 years ago
• jhaddix / LinkFinder
  A python script that finds endpoints in JavaScript files
  ☆42Updated 5 years ago
• rahulunair / vulnerable-api
  This repository contains an example Python API that is vulnerable to several different web API attacks.
  ☆27Updated 5 years ago
• random-robbie / wheres-my-git
  Wheres My Git - Find /.git/config files based on dirs found in home url
  ☆20Updated 2 years ago
• punk-AJ / oscpnotes
  These are my notes for OSCP preparation. Hope you'll find them useful.
  ☆14Updated 5 years ago
• jhaddix / asnrecon
  ASN reconnaissance script
  ☆23Updated 4 years ago