Endxo - Curated tech search

ws

web security

Search within Web Security - Miscellaneous

Miscellaneous
awesome-bug-bounty - Comprehensive curated list of available Bug Bounty & Disclosure Programs and write-ups by @djadmin

Updated 5 months ago

The latest commit was 5 months ago

Read more

2366

221
Miscellaneous
bug-bounty-reference - List of bug bounty write-up that is categorized by the bug nature by @ngalongc

Updated 3 months ago

Fresh

The latest commit was 3 months ago

Read more

2147

206
Miscellaneous
Google VRP and Unicorns - Written by Daniel Stelter-Gliese
Miscellaneous
Brute Forcing Your Facebook Email and Phone Number - Written by PwnDizzle
Miscellaneous
Pentest + Exploit dev Cheatsheet wallpaper - Penetration Testing and Exploit Dev CheatSheet
Miscellaneous
The Definitive Security Data Science and Machine Learning Guide - Written by JASON TROS
Miscellaneous
EQGRP - Decrypted content of eqgrp-auction-file.tar.xz by @x0rz

Updated 3 years ago

The latest commit was 3 years ago

Read more

3639

388
Miscellaneous
notes - Some public notes by @ChALkeR

Updated 1 year ago

The latest commit was 1 year ago

Read more

1239

96
Miscellaneous
A glimpse into GitHub's Bug Bounty workflow - Written by @gregose
Miscellaneous
Cybersecurity Campaign Playbook - Written by Belfer Center for Science and International Affairs
Miscellaneous
Infosec_Reference - Information Security Reference That Doesn't Suck by @rmusser01

Updated 2 days ago

Fresh

The latest commit was 2 days ago

Read more

3145

240
Miscellaneous
Internet of Things Scanner - Check if your internet-connected devices at home are public on Shodan by BullGuard
Miscellaneous
The Bug Hunters Methodology v2.1 - Written by @jhaddix
Miscellaneous
$7.5k Google services mix-up - Written by Ezequiel Pereira
Miscellaneous
How I exploited ACME TLS-SNI-01 issuing Let's Encrypt SSL-certs for any domain using shared hosting - Written by @fransrosen
Miscellaneous
TL:DR: VPN leaks users IPs via WebRTC. Ive tested seventy VPN providers and 16 of them leaks users IPs via WebRTC (23%) - TL:DR: VPN leaks users IPs via WebRTC. Ive tested seventy VPN providers and 16 of them leaks users IPs via WebRTC (23%) - Written by voidsec
Miscellaneous
Escape and Evasion Egressing Restricted Networks - Written by Chris Patten, Tom Steele
Miscellaneous
Be careful what you copy: Invisibly inserting usernames into text with Zero-Width Characters - Written by @umpox
Miscellaneous
Domato Fuzzer's Generation Engine Internals - Written by sigpwn
Miscellaneous
CSS Is So Overpowered It Can Deanonymize Facebook Users - Written by Ruslan Habalov
Miscellaneous
Introduction to Web Application Security - Written by @itsC0rg1, @jmkeads and @matir
Miscellaneous
Finding The Real Origin IPs Hiding Behind CloudFlare or TOR - Written by Paul Dannewitz
Miscellaneous
Why Facebook's api starts with a for loop - Written by @AntoGarand
Miscellaneous
How I could have stolen your photos from Google - my first 3 bug bounty writeups - Written by @gergoturcsanyi
Miscellaneous
An example why NAT is NOT security - Written by @0daywork
Miscellaneous
WEB APPLICATION PENETRATION TESTING NOTES - Written by Jayson
Miscellaneous
Hacking with a Heads Up Display - Written by David Scrobonia
Miscellaneous
Alexa Top 1 Million Security - Hacking the Big Ones - Written by @slashcrypto
Miscellaneous
The bug bounty program that changed my life - Written by Gwen
Miscellaneous
List of bug bounty writeups - Written by Mariem
Miscellaneous
Implications of Loading .NET Assemblies - Written by Brian Wallace
Miscellaneous
WCTF2019: Gyotaku The Flag - Written by @t0nk42
Miscellaneous
How we abused Slack's TURN servers to gain access to internal services - Written by @sandrogauci
Miscellaneous
DOS File Path Magic Tricks - Written by @clr2of8
Miscellaneous
How I got my first big bounty payout with Tesla - Written by @cj.fairhead

Categories

Perform all manner of "cyber" operations within a web browser such as AES, DES a ...

A DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

Searches full repo history for secrets and keys by @zricethezav

Interactive TLS-capable intercepting HTTP proxy for penetration testers and soft ...

PayloadsAllTheThings

Written by @swisskyrepo

OSINT - Open-Source Intelligence Reconnaissance Tools

Incredibly fast crawler designed for OSINT by @s0md3v

Disassembler Tools

Unix-like reverse engineering framework and commandline tools by @radare

Security Table of Contents

An automatic SQL injection and database takeover tool.

This is a webshell open source project by @tennc

XSS - Cross-Site Scripting Offensive Tools

is a program which can fuzz and bruteforce parameters for XSS. It can also detec ...