saikrishnadm Goto Github PK

google-dorks

Useful Google Dorks for WebSecurity and Bug Bounty

grapx

grapX will iterate through the URLs and grep the endpoints with all possible extensions.

guide-to-ssrf

Guide to SSRF

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

hack-tools

The all-in-one Red Team extension for Web Pentester 🛠

hack_pack_v1.0

hacker-roadmap

:pushpin: Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

hackerone-reports

Top disclosed reports from HackerOne

headi

Customisable and automated HTTP header injection

howtohunt

Tutorials and Things to Do while Hunting Vulnerability.

html-injection

Simple HTML Injection Scanner.

http-request-smuggling

HTTP Request Smuggling Detection Tool

infosec_reference

An Information Security Reference That Doesn't Suck

intruderpayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

java_script

basics

jsfscan.sh

Automation for javascript recon in bug bounty.

jwt-pwn

Security Testing Scripts for JWT

jwt_tool

:snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

karma_v1

KARMA is a simple bash script automation that can hit Shodan Premium API and find active IPs, ASN, Common Vulnerabilities, CVEs & Open Ports.

key-checker

Go scripts for checking API key / access token validity

keywords

kingofbugbountytips

knowledgesharing

lazy-fuzzz

Sometimes we want to fuzz a set of sub-domain URLs with a common wordlist. Fuzzing them one by one is a tedious task, not to mention the false positives we obtain in those results. To solve this problem I created Lazy FuzzZ. It fuzzes all those urls, removes all false positives and sends only legitimate results to burpsuite.

lazymux

termux tool installer

learn365

This repo is about @harshbothra_ 365 days of learning Tweet & Mindmap collection

learn365-1

The purpose of #Learn365 collection is to create informational content in multiple codecs and share with the community to allow knowledge advent and studying.

linkfinder

A python script that finds endpoints in JavaScript files

linkjs