Endxo - Curated tech search

ws

web security

Search within Web Security - Miscellaneous

Miscellaneous
awesome-bug-bounty - Comprehensive curated list of available Bug Bounty & Disclosure Programs and write-ups by @djadmin

Updated 11 months ago

The latest commit was 11 months ago

Read more

2431

229
Miscellaneous
bug-bounty-reference - List of bug bounty write-up that is categorized by the bug nature by @ngalongc

Updated 9 months ago

The latest commit was 9 months ago

Read more

2202

214
Miscellaneous
Google VRP and Unicorns - Written by Daniel Stelter-Gliese
Miscellaneous
Brute Forcing Your Facebook Email and Phone Number - Written by PwnDizzle
Miscellaneous
Pentest + Exploit dev Cheatsheet wallpaper - Penetration Testing and Exploit Dev CheatSheet
Miscellaneous
The Definitive Security Data Science and Machine Learning Guide - Written by JASON TROS
Miscellaneous
EQGRP - Decrypted content of eqgrp-auction-file.tar.xz by @x0rz

Updated 3 years ago

The latest commit was 3 years ago

Read more

3651

391
Miscellaneous
notes - Some public notes by @ChALkeR

Updated 1 year ago

The latest commit was 1 year ago

Read more

1242

97
Miscellaneous
A glimpse into GitHub's Bug Bounty workflow - Written by @gregose
Miscellaneous
Cybersecurity Campaign Playbook - Written by Belfer Center for Science and International Affairs
Miscellaneous
Infosec_Reference - Information Security Reference That Doesn't Suck by @rmusser01

Updated 5 months ago

Fresh

The latest commit was 5 months ago

Read more

3231

242
Miscellaneous
Internet of Things Scanner - Check if your internet-connected devices at home are public on Shodan by BullGuard
Miscellaneous
The Bug Hunters Methodology v2.1 - Written by @jhaddix
Miscellaneous
$7.5k Google services mix-up - Written by Ezequiel Pereira
Miscellaneous
How I exploited ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting - Written by @fransrosen
Miscellaneous
TL:DR: VPN leaks users IPs via WebRTC. Ive tested seventy VPN providers and 16 of them leaks users IPs via WebRTC (23%) - TL:DR: VPN leaks users IPs via WebRTC. Ive tested seventy VPN providers and 16 of them leaks users IPs via WebRTC (23%) - Written by voidsec
Miscellaneous
Escape and Evasion Egressing Restricted Networks - Written by Chris Patten, Tom Steele
Miscellaneous
Be careful what you copy: Invisibly inserting usernames into text with Zero-Width Characters - Written by @umpox
Miscellaneous
Domato Fuzzer's Generation Engine Internals - Written by sigpwn
Miscellaneous
CSS Is So Overpowered It Can Deanonymize Facebook Users - Written by Ruslan Habalov
Miscellaneous
Introduction to Web Application Security - Written by @itsC0rg1, @jmkeads and @matir
Miscellaneous
Finding The Real Origin IPs Hiding Behind CloudFlare or TOR - Written by Paul Dannewitz
Miscellaneous
Why Facebook's api starts with a for loop - Written by @AntoGarand
Miscellaneous
How I could have stolen your photos from Google - my first 3 bug bounty writeups - Written by @gergoturcsanyi
Miscellaneous
An example why NAT is NOT security - Written by @0daywork
Miscellaneous
WEB APPLICATION PENETRATION TESTING NOTES - Written by Jayson
Miscellaneous
Hacking with a Heads Up Display - Written by David Scrobonia
Miscellaneous
Alexa Top 1 Million Security - Hacking the Big Ones - Written by @slashcrypto
Miscellaneous
The bug bounty program that changed my life - Written by Gwen
Miscellaneous
List of bug bounty writeups - Written by Mariem
Miscellaneous
Implications of Loading .NET Assemblies - Written by Brian Wallace
Miscellaneous
WCTF2019: Gyotaku The Flag - Written by @t0nk42
Miscellaneous
How we abused Slack's TURN servers to gain access to internal services - Written by @sandrogauci
Miscellaneous
DOS File Path Magic Tricks - Written by @clr2of8
Miscellaneous
How I got my first big bounty payout with Tesla - Written by @cj.fairhead

Categories

Interactive TLS-capable intercepting HTTP proxy for penetration testers and soft ...

PayloadsAllTheThings

Written by @swisskyrepo

Disassembler Tools

Unix-like reverse engineering framework and commandline tools by @radare

Security Table of Contents

An automatic SQL injection and database takeover tool.