Hazem El-Sayed

client-side-bugs-resources. A resources for who want to learn and get deep into client-side bugs

crtHunter. Tool to extract all subdomains from crt.sh search using RegEx and Web Scraping

webarchive. Webarchive is a Go package for pentesters and developers to interacting with the Wayback Machine's CDX API and integrate web archive utilities into your Golang projects.

tld. The tld package provides functionality to parse URLs and extract various components such as subdomain, domain, top-level domain (TLD), and port. It is particularly useful for scenarios where you need to analyze or manipulate URLs in your Go applications.

vuln-app. Vulnrable application to practice on why vulnrabilites happens in the backend and what is the secure code for it.

GoForHacking. Minin Golang tools for Hacking

CVE-2024-4577. CVE-2024-4577 Exploit POC

logz. Logging golang package

dot-files. My Coustom dot files (Bash - vim - ...)

js-linkfinder. JavaScript Extension

monx. Monitoring framework to detect and report newly found subdomains on a specific target using various scanning tools

CVE-2024-3495-POC. The Country State City Dropdown CF7 WordPress plugin (versions up to 2.7.2) is vulnerable to SQL Injection via 'cnt' and 'sid' parameters. Insufficient escaping and lack of preparation in the SQL query allow unauthenticated attackers to append queries, potentially extracting sensitive database information.

web-app. Web APPs Back-End codes that i coded

Resources. Resources for who want to learn Pentesting and bug bounty hunting

Golang-Testing. Testing codes using golang (Unit & Benchmark Testing)

colorizer. Go

AllAboutBugBounty. All about bug bounty (bypasses, payloads, and etc)

HowToHunt. Collection of methodology and test case for various web vulnerabilities.

dalfox. 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Bug_Bounty_Notes. A collection of notes for bug bounty hunting

crypto-codes. Cryptography codes using python i wrote to solve Crypto CTFs