Community curated list of public bug bounty and responsible disclosure programs.

🕵️‍♂️ Offensive Google framework.

Resources to help you keep secrets (API keys, database credentials, certificates, ...) out of source code and remediate the issue in case of a leaked API key. Made available by GitGuardian.

List of XSS Vectors/Payloads

HTTP static responses, like Fiddler's auto responder

Awesome XSS stuff

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Repo for tools

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.

discontinued

A PHP tool to brute force vhost configured on a server.

A script to enumerate virtual hosts on a server.

🏃 A .NET library, developed by humans, for running external commands.

Automatically exported from code.google.com/p/simple-assembly-exploror

A software licensing framework

Reverse Shell as a Service

Inject javascript into closed source electron applications e.g. to enable developer tools for debugging.

JavaScript framework for robotics, drones, and the Internet of Things (IoT)

A tiny script for generating attractive colors

A system for quickly generating training data with weak supervision

Defeating Windows User Account Control

A light weight http(s) proxy server in C#.NET

Minimal and clean examples of machine learning algorithms implementations

SQL / SQLI tokenizer parser analyzer

Roslyn analyzers that aim to help security audit on .NET applications.

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

A cross-platform asynchronous HTTP(S) proxy server in C#.