Skip to content

Instantly share code, notes, and snippets.

View Diaa-Hassan's full-sized avatar
πŸ§™

Diaa Hassan Diaa-Hassan

πŸ§™
View GitHub Profile
@duraki
duraki / sqlmap_which_tamper_to_use.txt
Created May 8, 2021 09:35
Best sqlmap tampers to use depending on the DBMS
## MySQL
space2randomblank
unionalltounion
unmagicquotes
versionedkeywords
versionedmorekeywords
xforwardedforbetween
bluecoat
charencode
@KathanP19
KathanP19 / Open-Redirect-Payloads.txt
Last active April 15, 2024 18:41
Open Redirect Payloads from zseano methodology.
\/evil.com
%5c%2fevil.com
\/\/evil.com
%5c%2f%5c%2fevil.com
\\evil.com
%5c%5cevil.com
//evil.com
%2f%2fevil.com
//[email protected]
/\/evil.com
@brevityinmotion
brevityinmotion / brevity-programs-bulk.py
Created July 28, 2021 03:22
Bulk load bug bounty programs
import json, boto3
import ast
import urllib.request
import pandas as pd
import numpy as np
import brevityscope.scope
import brevityprogram.programs
def lambda_handler(event, context):
@tedmdelacruz
tedmdelacruz / commands.sh
Last active July 9, 2022 00:55
Personal bug bounty commands
# Download all URLs from a text file
while read line; do; wget $line; done<urls.txt
# Quick probe of an asset
function probe(){
TARGET=$1
whatweb $TARGET
gau $TARGET
echo $TARGET | waybackurls
ffuf -v -mc 200,401,500 -c -w ~/wordlists/configfiles -u $TARGET/FUZZ
${ctx:loginId}
${map:type}
${filename}
${date:MM-dd-yyyy}
${docker:containerId}
${docker:containerName}
${docker:imageName}
${env:USER}
${event:Marker}
${mdc:UserId}
@ruevaughn
ruevaughn / Bug Bounty Resources.txt
Last active November 24, 2024 17:36
My Resources and Links over time to various Tools, Notes, Videos, Papers, Articles, Writeups, and more. Will be moving to my own private hosted Wikipedia soon. Ascii Art Font: Calvin S
╔╦╗╦ ╦ β•”β•— ┬ β”¬β”Œβ”€β” β•”β•— β”Œβ”€β”β”¬ β”¬β”Œβ”β”Œβ”¬β”β”¬ ┬ β•¦β•β•—β”Œβ”€β”β”Œβ”€β”β”Œβ”€β”β”¬ β”¬β”¬β”€β”β”Œβ”€β”β”Œβ”€β”β”Œβ”€β”
β•‘β•‘β•‘β•šβ•¦β• β• β•©β•—β”‚ β”‚β”‚ ┬ β• β•©β•—β”‚ β”‚β”‚ β”‚β”‚β”‚β”‚β”‚ β””β”¬β”˜ β• β•¦β•β”œβ”€ └─┐│ β”‚β”‚ β”‚β”œβ”¬β”˜β”‚ β”œβ”€ └─┐
β•© β•© β•© β•šβ•β•β””β”€β”˜β””β”€β”˜ β•šβ•β•β””β”€β”˜β””β”€β”˜β”˜β””β”˜β”΄ β”΄ β•©β•šβ•β””β”€β”˜β””β”€β”˜β””β”€β”˜β””β”€β”˜β”΄β””β”€β””β”€β”˜β””β”€β”˜β””β”€β”˜
//
()==========>>======================================--
\\
2FA Bypass
@KathanP19
KathanP19 / option_inside_long.sh
Created December 30, 2021 06:05
Template for bash Script with Arguments inside Flags.
#!/bin/bash
function first(){
echo "First Function";
}
function second(){
echo "Second Function";
}
@ruevaughn
ruevaughn / Wheneva oneliners
Last active July 8, 2022 13:40
onelineerz
https://medium.com/cyberverse/bug-bounty-with-bash-438596ff72f5
while read sub; do if host β€œ$sub.example.com” &> /dev/null; then echo β€œ$sub.example.com”; fi; done < subdomains_wordlist.txt
[Alterenative one-lizers[(https://www.gnu.org/software/datamash/alternatives/)
https://kathan19.gitbook.io/howtohunt/subdomain-takeover/easy_methods
https://twitter.com/bashoneliners
https://www.rexegg.com/regex-perl-one-liners.html
https://github.com/digitalocean/droplet-1-clicks
https://www.kali.org/docs/cloud/digitalocean/
https://fai-project.org/FAIme/#
https://www.geeksforgeeks.org/top-5-digital-ocean-alternatives/

Forked from various GitHub-repos

(There might be some duplicates...)

Scripts that need to be installed

To run the project, you will need to install the following programs: