Update 25.01.2021: Added Google engineers exploit method for getting access token.   Google Cloud Monitoring (formerly called Stackdriver)...

This repository is primarily maintained by Omar Santos (@santosomar) and includes thousands of resources related to ethical hacking, bug bounties, digital forensics and incident response (DFIR), ar...

Hey everyone, didn’t get time this year to blog about my findings. But this one, i found around 2–3 months back , it was interesting case…

In this write-up, we’ll see how I identified a remote code execution vulnerability and bypassed the Akamai WAF rule(s). While I was doing…

Tor Binary in Android as a Library. Contribute to mirsamantajbakhsh/TorAndroid development by creating an account on GitHub.

Burpsuite Extension to bypass 403 restricted directory - sting8k/BurpSuite_403Bypasser

NMAP Build for Android (x86, armeabi). Contribute to mirsamantajbakhsh/NMAPAndroid development by creating an account on GitHub.

Posted by Ian Beer, Project Zero NOTE: This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in...

As some of you will know, we have recently entered into the Red Team training space. Before deciding to create our course now known as “Adversary Simulation and Red Team...

Group warns sum will double every 24 hours, and say they'll sell the documents if ransom money not paid within 3 days

Researchers detail how a Android APK obfuscation service automates detection evasion for highly malicious apps.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more! - pry0cc/axiom

Tired of proving you're not a robot? In this post, I'll show how you can partially bypass Google reCAPTCHA by using a new Turbo Intruder feature to trigger a race condition. This vulnerability was rep

-