NA's repositories
Arjun
Arjun is a python script for finding hidden GET & POST parameters.
cloudfrunt
A tool for identifying misconfigured CloudFront domains
contact.sh
An OSINT tool to find contacts in order to report security vulnerabilities.
Diggy
Extract enpoints from apk files.
infosec-resources4all
Only the best quality InfoSec-resources shared, based on regular sourcing of publicly available content found on the internet.
prowler
Distributed Network Vulnerability Scanner
meg
Fetch many paths for many hosts - without killing the hosts
BloodHound
Six Degrees of Domain Admin
cloud-inquisitor
Enforce ownership and data security within AWS
amass
In-Depth Subdomain Enumeration
SubOver
A Powerful Subdomain Takeover Tool
spring-framework
Spring Framework
bug-bounty-reference
Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
ctf-writeups
Some of my CTF writeups/solutions/scripts
AwesomeXSS
Awesome XSS stuff
getaltname
Get Subject Alt Name from SSL Certificates
aws-audit
AWS Audit Scripts - CloudFront subdomain takeover audit, etc
RootHelper
A Bash script that downloads and unzips scripts that will aid with privilege escalation on a Linux system.
iCloudBrutter
AppleID Bruteforce
pymassdns
A Pythonic wrapper to MassDNS
can-i-take-over-xyz
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
Pyrate
Practice Web App written in python with some vulnerabilities.
S3Scanner
Scan for open S3 buckets and dump
laverna
Laverna is a JavaScript note taking application with Markdown editor and encryption support. Consider it like open source alternative to Evernote.
Passhunt
Passhunt is a simple tool for searching of default credentials for network devices, web applications and more. Search through 523 vendors and their 2084 default passwords.
domain
Setup script for Regon-ng
clickbandit
A JavaScript clickjacking PoC generator
Powershell-RAT
Python based backdoor that uses Gmail to exfiltrate data through attachment. This RAT will help during red team engagements to backdoor any Windows machines. It tracks the user activity using screen capture and sends it to an attacker as an e-mail attachment.
OSCP-cheat-sheet
list of useful commands, shells and notes related to OSCP