Mapping from bug bounty and vulnerability disclosure programs to respective GitHub organizations

unleashed ffuf

A simple browser extension to quickly find interesting security-related information on a webpage.

♥

Get some useful data from Clouds for your targets

Documenting all the sources from where I'm learning Mobile(adnroid/IOS) bug bounty so if another researcher want to start with mobile bug bounty he/she don't struggle for resources

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Port scanning is crucial in recon, but running it manually on big scopes? Nope. That’s why I made Nmap Bomber a Python script that runs fast and furious parallel nmap scans on your subdomains.

基于美团接口的IP定位系统，使用CFWorker部署

Nuclei-AI-Prompts

CT Log Scanner

A better way of querying certificate transparency logs

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

List of Awesome Asset Discovery Resources

DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain name variations to assist in subdomain discove…

Python-based tool for identifying potential dependency confusion vulnerabilities in JavaScript (`package.json`) and Python (`requirements.txt`) projects

Implementation of the next generation of HTTP User-Agent modification methodology.

Tool to check for dependency confusion vulnerabilities in multiple package management systems

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

Python binding for curl-impersonate via cffi. A http client that can impersonate browser tls/ja3/http2 fingerprints.

FastJson全版本Docker漏洞环境(涵盖1.2.47/1.2.68/1.2.80等版本)，主要包括JNDI注入及高版本绕过、waf绕过、文件读写、原生反序列化、利用链探测绕过、不出网利用等。从黑盒的角度覆盖FastJson深入利用

mini-spring是简化版的spring框架，能帮助你快速熟悉spring源码和掌握spring的核心原理。抽取了spring的核心逻辑，代码极度简化，保留spring的核心功能，如IoC和AOP、资源加载器、事件监听器、类型转换、容器扩展点、bean生命周期和作用域、应用上下文等核心功能。

Yet another Ransomware gang tracker

Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.

curl-impersonate: A special build of curl that can impersonate Chrome & Firefox

mini-spring-cloud是简化版的spring-cloud框架，能帮助你快速熟悉spring-cloud源码及掌握其核心原理。在保留spring cloud核心功能的的前提下尽量精简代码，核心功能包括服务注册、服务发现、负载均衡、集成Feign简化调用、流量控制、熔断降级、API网关等。

基于Python3.8，全异步构建的高性能ICP备案查询模块和API，直接从工业和信息化部政务服务平台抓取实时数据，支持Web、APP、小程序、快应用名称查询，支持根据备案号查询，支持根据企业名称查询，同时提供发行版程序

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.