Muhammad Daffa

All about bug bounty (bypasses, payloads, and etc)

Useful "Match and Replace" burpsuite rules

Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)

Go script for bypassing 403 forbidden

CTF Writeups

Suricata rules that can detect a wide range of threats, including malware, exploits, and other malicious activity especially web application attacks

Go scripts for checking API key / access token validity

A collection oneliner scripts for bug bounty

Go scripts for finding sensitive data like API key / some keywords in the github repository

Random Tools for Bug Bounty

Some contributions in the nuclei-templates repository

Simple website to guess API Key / OAuth Token

Go script to guess an API key / OAuth token found during pentest. CLI version of https://github.com/daffainfo/apiguesser-web/

Jawaban pemrograman C dan C++ https://tlx.toki.id/

Simple vulnerability labs that created using PHP and MySQL.

A simple vulnerable webapp created by PHP

Template to detect some malware

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Tools for Detecting Malicious Packages

DNS lookup using Go

Simple API to scans SPF, DMARC, DKIM records for issues that could allow email spoofing.

PHP CRUD + Login and Register

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

Golang tool to send notifications to LINE app

Personal website and blog made using Hugo and PaperMod theme

This repository contains all the XSS cheatsheet data to allow contributions from the community.

Website info-corona.id

Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.

Simple bash script to install OpenXPKI on Debian

Final Project for Mobile Device Programming Course

No description.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

No description.

Fast and customizable vulnerability scanner based on simple YAML based DSL.

Metasploit Framework

gemastik-xvii-final public repository

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems