Danny Grander grnd

## github_bugbountyhunting.md

      
              1 file
            
          
              98 forks
            
          
              15 comments
            
          
              532 stars
            
          
                EdOverflow
                / github_bugbountyhunting.md
            
            
              Last active
              April 29, 2024 14:36
            
              
                My tips for finding security issues in GitHub projects.
              
          
    GitHub for Bug Bounty Hunters

GitHub repositories can disclose all sorts of potentially valuable information for bug bounty hunters. The targets do not always have to be open source for there to be issues. Organization members and their open source projects can sometimes accidentally expose information that could be used against the target company. in this article I will give you a brief overview that should help you get started targeting GitHub repositories for vulnerabilities and for general recon.
Mass Cloning

You can just do your research on github.com, but I would suggest cloning all the target's repositories so that you can run your tests locally. I would highly recommend @mazen160's GitHubCloner. Just run the script and you should be good to go.
$ python githubcloner.py --org organization -o /tmp/output

  
## Petya_ransomware.md

      
              1 file
            
          
              46 forks
            
          
              42 comments
            
          
              209 stars
            
          
                vulnersCom
                / Petya_ransomware.md
            
            
              Last active
              July 6, 2023 19:30
            
          
    #petya #petrWrap #notPetya

Win32/Diskcoder.Petya.C

Ransomware attack.

About

This gist was built by the community of the researchers and was scribed by Kir and Igor from the QIWI/Vulners.
We are grateful for the help of all those who sent us the data, links and information.
Together we can make this world a better place!
Gist updates


## dev position.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                adrukh
                / dev position.md
            
            
              Last active
              April 12, 2016 07:52
            
              
                Recruitment post
              
          
    [Snyk Dev Position] (https://snyk.io)

Who are we?

Snyk is an early stage startup located in Tel Aviv. Our mission is to secure the way we build and consume open source software. We have top tier advisors and investors, including the founders of GitHub, Parse, Wix, PubNub and more.
Our users are developers just like us, and we value products that look as good on the inside as they do on the outside. Matching the expectations of other developers and solving problems they face sets a high bar for us to continuously strive towards.
We are building a remote-first company culture, focusing on engineering practices that fit the open source world. We believe in openness as the best attitude, and follow it in how we act as a team and how we build our products.