Python Duo Push API

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

All my infosec notes I have been building up over the years

Tips and Tutorials for Bug Bounty and also Penetration Tests.

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

A list of companies that allow remote work from 🇹🇷

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

https://github.com/timip/OSWE

An XSS exploitation command-line interface and payload generator.

Apache Solr Injection Research

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

Subdomain enumeration tool, asynchronous dns packets, use pcap to scan 1600,000 subdomains in 1 second

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous …

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Unofficial documentation for the great tool Param Miner

Burp extension to check and exploit the IIS Tilde Enumeration/IIS 8.3 Short Filename Disclosure vulnerability

the only cheat sheet you need

🎓 Path to a free self-taught education in Computer Science!

A complete computer science study plan to become a software engineer.

An opinionated list of awesome Python frameworks, libraries, software and resources.

All Algorithms implemented in Python

How to systematically secure anything: a repository about security engineering

Incredibly fast crawler designed for OSINT.

Deobfuscator for Android Application

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

OneForAll是一款功能强大的子域收集工具

Some good resources for getting started with application security

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files