Makes reverse engineering Android apps easier, automating repetitive tasks like pulling, decoding, rebuilding and patching an APK. - ax/apk.sh

Writeup for a technique I found to leak an AWS account ID from an Amplify app.

A simple script just made for self use for bypassing 403 - iamj0ker/bypass-403

jsleak is a tool to find secret , paths or links in the source code during the recon. - byt3hx/jsleak

Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not - anmolksachan/TheTimeMachine

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. - musana/fuzzuli

Permanent dark(er) theme for Poole

Learn how to bypass Cloudflare's anti-bot protection so you can reliably scrape Cloudflare protected websites.

This link will take you to a page that’s not on LinkedIn

Hi, I’m Aakash Rathee, a Security Engineer III at Esper. I work on a variety of security topics, including Application Security, Cloud…

What's Changed

Added support to expose DNS response as dsl field by @ShubhamRasal in #3613
Added support to filter templates based on classification by @iamargus95 in #3606
Added check to make...

Discovering XSS in large companies is one of my hobbies. Today I want to talk about Opera XSS which took 15 minutes. The power of finding…

SSRF bible. Cheatsheet Revision 1.03 26 Jan 2017 Authors: @Wallarm @d0znpp research team Wallarm.com|lab.wallarm.com Try our new product. Wallarm FAST: security tests from traffic https://wallarm.com/wallarm-fast/ Table of contents Table of contents Basics…

Microsoft fixed a security vulnerability this week that could be used by remote attackers to bypass recent patches for a critical Outlook zero-day security flaw abused in the wild.

-

Managed by the OWASP® Foundation
https://owasp.org/

A vulnerability in KuCoin & why HackenProof & KuCoin're not trustworthy.

Today I’m going to talk about cache, denial of service, and a vulnerability I recently found in a very large company.