balook

agentic_security

Agentic LLM Vulnerability Scanner

Priv8-Nuclei-Templates

My Priv8 Nuclei Templates

SQL_Injection-Techniques

Advanced SQL Injection Techniques for Bug Bounty Hunters

domloggerpp

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

solidity-interview-questions

portfolio

web3 portfolio

portfolio

A short list of my findings

403jump

HTTP 403 bypass tool

audits

SBSecurity's portfolio

security

Security Reviews and Audit Checklists

Leaked-Credentials

how to look for Leaked Credentials !

subfuz

A subdomain fuzzing tool

cal.com

Scheduling infrastructure for absolutely everyone.

audit-checklists

advisories

dmut

A tool to perform permutations, mutations and alteration of subdomains in golang.

Snapchat-SSL-Pinning-Bypass

Bypass Snapchat SSL pinning on Android devices

weird-erc20

weird erc20 tokens

token-tester

Use cursed ERC20s in foundry unit tests

Galaxy-Bugbounty-Checklist

Tips and Tutorials for Bug Bounty and also Penetration Tests.

eth-proof-of-consensus

learn-evm-attacks

Learn and contribute by exploring blockchain attacks in detail. Maintained by Coinspect smart contract audit team, renowned for their top-tier smart contract audit services.

positions-vacant

Vacant Positions at Sigma Prime

solstat

A Solidity static analyzer to identify contract vulnerabilities and gas efficiencies.

4naly3er

Static smart contract code 4naly3er

FridaApp

app to play with Frida tool

DefaultCreds-cheat-sheet

One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

ethernaut-x-foundry

OpenZeppelin Ethernaut CTF solved & tested with Foundry

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Astra

Astra is a tool to find URLs and secrets inside a webpage/files