Web Security | Bug hunting
@cybersecurityresources
7.41K
subscribers
46
photos
2
files
473
links
A web penetration testing / General cybersecurity / Network related topics channel that provides direct links for interesting resources and notes.
Download Telegram
Join
Web Security | Bug hunting
7.41K subscribers
Web Security | Bug hunting
https://wpvulndb.com/?fbclid=IwAR2hogEjA0X6l0Mtdiy_giKdi2BUQlCgJPMdg-hukThIJUEu0u2ShIElKEc
Wpvulndb
WPScan Vulnerability Database
A Vulnerability Database for WordPress, its Plugins and Themes.
Web Security | Bug hunting
https://medium.com/@the.bilal.rizwan/wordpress-xmlrpc-php-common-vulnerabilites-how-to-exploit-them-d8d3c8600b32
Medium
Wordpress xmlrpc.php -common vulnerabilites & how to exploit them
Hello there! , whats up ? ,Bilal Rizwan here hope your doing great & having fun learning from the community like I am.
Web Security | Bug hunting
https://github.com/mazen160/GithubCloner
GitHub
GitHub - mazen160/GithubCloner: A script that clones Github repositories of users and organizations.
A script that clones Github repositories of users and organizations. - mazen160/GithubCloner
Web Security | Bug hunting
https://gist.github.com/EdOverflow/922549f610b258f459b219a32f92d10b
Gist
My tips for finding security issues in GitHub projects.
My tips for finding security issues in GitHub projects. - github_bugbountyhunting.md
Web Security | Bug hunting
https://github.com/maurosoria/dirsearch
GitHub
GitHub - maurosoria/dirsearch: Web path scanner
Web path scanner. Contribute to maurosoria/dirsearch development by creating an account on GitHub.
Web Security | Bug hunting
https://github.com/Bo0oM/fuzz.txt
GitHub
GitHub - Bo0oM/fuzz.txt: Potentially dangerous files
Potentially dangerous files. Contribute to Bo0oM/fuzz.txt development by creating an account on GitHub.
Web Security | Bug hunting
https://amp.kitploit.com/2019/06/prithvi-report-generation-tool.html?amp=1&m=1#click=https://t.co/MCBGgivEf5
KitPloit
☣
Prithvi - Report Generation Tool
Web Security | Bug hunting
https://github.com/redhuntlabs/BurpSuite-Asset_Discover
GitHub
GitHub - redhuntlabs/BurpSuite-Asset_Discover: Burp Suite extension to discover assets from HTTP response.
Burp Suite extension to discover assets from HTTP response. - redhuntlabs/BurpSuite-Asset_Discover
Web Security | Bug hunting
https://github.com/0x4D31/awesome-oscp
GitHub
GitHub - 0x4D31/awesome-oscp: A curated list of awesome OSCP resources
A curated list of awesome OSCP resources. Contribute to 0x4D31/awesome-oscp development by creating an account on GitHub.
Web Security | Bug hunting
https://github.com/jivoi/awesome-osint
GitHub
GitHub - jivoi/awesome-osint: :scream: A curated list of amazingly awesome OSINT
:scream: A curated list of amazingly awesome OSINT - jivoi/awesome-osint
Web Security | Bug hunting
https://github.com/EdOverflow/bugbounty-cheatsheet
GitHub
GitHub - EdOverflow/bugbounty-cheatsheet: A list of interesting payloads, tips and tricks for bug bounty hunters.
A list of interesting payloads, tips and tricks for bug bounty hunters. - EdOverflow/bugbounty-cheatsheet
Web Security | Bug hunting
https://github.com/Hack-with-Github/Awesome-Hacking
GitHub
GitHub - Hack-with-Github/Awesome-Hacking: A collection of various awesome lists for hackers, pentesters and security researchers
A collection of various awesome lists for hackers, pentesters and security researchers - Hack-with-Github/Awesome-Hacking
Web Security | Bug hunting
https://gist.github.com/kurobeats/9a613c9ab68914312cbb415134795b45
Gist
Deprecated - new repo here https://github.com/kurobeats/XSS-Vectors
Deprecated - new repo here https://github.com/kurobeats/XSS-Vectors - xss_vectors.txt
Web Security | Bug hunting
https://gist.github.com/staaldraad/01415b990939494879b4
Gist
XXE Payloads
XXE Payloads. GitHub Gist: instantly share code, notes, and snippets.
Web Security | Bug hunting
Tools :
https://bugbountyforum.com/tools/
Bugbountyforum
Bug Bounty Forum - tools - Index
Bug bounty forum - A list of helpfull resources may help you to escalate vulnerabilities.
Web Security | Bug hunting
https://forum.bugcrowd.com/t/researcher-resources-tools/167
Bugcrowd
Hackers | Bugcrowd
Bugcrowd teams with elite security researchers to reduce risk & improve security ROI through our bug bounty, pen testing, & vulnerability disclosure programs.
Web Security | Bug hunting
https://resources.infosecinstitute.com/use-firefox-browser-as-a-penetration-testing-tool-with-these-add-ons/
Infosecinstitute
18 extensions for turning Firefox into a Penetration testing tool | Infosec
Firefox is a popular web browser from Mozilla. Popularity of Firefox is not only because it's a good web browser, it also supports add-ons to enhance the fun
Web Security | Bug hunting
https://github.com/Pgaijin66/XSS-Payloads/blob/master/payload.txt
Web Security | Bug hunting
https://gist.github.com/clarketm/919457847cece7ce40323dc217623054
Gist
Listing of a number of useful Google dorks.
Listing of a number of useful Google dorks. GitHub Gist: instantly share code, notes, and snippets.
Web Security | Bug hunting
https://www.hackerone.com/blog/Guide-Subdomain-Takeovers
HackerOne
A Guide To Subdomain Takeovers
HackerOne's Hacktivity feed — a curated feed of publicly-disclosed reports — has seen its fair share of subdomain takeover reports. Since Detectify's fantastic series on subdomain takeovers, the bug bounty industry has seen a rapid influx of reports concerning…
Web Security | Bug hunting
https://medium.com/@rootxharsh_90844/vimeo-ssrf-with-code-execution-potential-68c774ba7c1e
Medium
Vimeo SSRF with code execution potential.
Recently i discovered a semi responded SSRF on Vimeo with code execution possibility. This blog post explains how i found & exploited it…
