Godson

blogs. ✨ Build a beautiful and simple website in literally minutes. Demo at https://beautifuljekyll.com

OSWE-PREPARATION.

my-ctfs. HTML

awesome-security-newsletters. Periodic cyber security newsletters that capture the latest news, summaries of conference talks, research, best practices, tools, events, vulnerabilities, and analysis of trending threats and attacks

0xGodson.

todo-node-mongodb. JavaScript

evilarc. Create tar/zip archives that can exploit directory traversal vulnerabilities

h2rs. Detects request smuggling via HTTP/2 downgrades.

nuclei-templates.

SecurityExplained. SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

Web-Attack-Cheat-Sheet. Web Attack Cheat Sheet

tweet-machine. This tool can retrieve : 1.Deleted tweets and replies ,Even if The account is suspended 2.Old bios and Timestamp of The tweets. PS: This is my first Tool 🥴

turboIntruderplus.

awesome-api-security. A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

CTFWEBchallenge. Collections of CTF-WEB-challs mainly for review purpose.

h2csmuggler. Go

eventlistener-xss-recon.

filterStatus. Python

blocksec-ctfs. A curated list of blockchain security Capture the Flag (CTF) competitions

todo-extension. JavaScript

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera. 🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337

s3sec. Check AWS S3 instances for read/write/delete access

kali-punk. i3 rice Inspired by Cyberpunk 2077

OSCE-exam-practice. Proof of Concept exploit scripts and fuzzing templates. Companion blog posts located at https://epi052.gitlab.io/notes-to-self/blog/2020-05-13-osce-exam-practice-part-one/

confused. Tool to check for dependency confusion vulnerabilities in multiple package management systems

Information-Security-Tasks. This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

OSWE. Repo for OSWE related video content for @SecAura Youtube Channel

node-jsonwebtoken. JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html

Golden-Guide-for-Pentesting. Golden Guide

Autoscraper-n-blogger. An Automated udemy coupons scraper which scrapes coupons and autopost the result in blogspot post

OSWE-Prep. An OSWE Guide

ysoserial. A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

skf-labs. Repo for all the OWASP-SKF Docker lab examples

403Bypasser. Python

AWAE-PREP. This repository will serve as the "master" repo containing all trainings and tutorials done in preperation for OSWE in conjunction with the AWAE course. This repo will likely contain custom code by me and various courses.

getStatus. Python

AWAE-OSWE.

race-condition-exploit. Tool to help with the exploitation of web application race conditions

what-happens-when. An attempt to answer the age old interview question "What happens when you type google.com into your browser and press enter?"

recon. Shell

ctf-support-materials.

AWAE-OSWE-Prep. Python

Node-JWT-auth. Just a Useless and Basic Node REST API without DB connection (Model)

basic-c. some basic simple c programs

getJs. Python

Node-REST-API-Auth-project-. JavaScript

notes-app. EJS

talks.

Book-Shop-Node-REST-API-Mongoose. JavaScript

Node-Rest-APT-MongoDB. JavaScript

AllThingsSSRF. This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

uxss-db. 🔪Browser logic vulnerabilities :skull_and_crossbones:

oct-xss. JavaScript

notes-app-2.0. JavaScript