Sathish Kishore's starred repositories
trufflehog
Find, verify, and analyze leaked credentials
my-arsenal-of-aws-security-tools
List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.
hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
rengine
reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.
AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
awesome-pentest-cheat-sheets
Collection of the cheat sheets useful for pentesting
log4j-scan
A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228
awesome-api-security
A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.
awesome-nodejs-security
Awesome Node.js Security resources
ParamSpider
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
ios-resources
Useful resources for iOS hacking
awesome-aws-security
Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security
Awesome-Azure-Pentest
A collection of resources, tools and more for penetration testing and securing Microsofts cloud platform Azure.
Application-Security-Engineer-Interview-Questions
Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer
oneliner-bugbounty
oneliner commands for bug bounties
graphql-wordlist
The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.
AZ900CertCourse
Repo for the AZ-900 Certification Course Handout
Jamf-Attack-Toolkit
Suite of tools to facilitate attacks against the Jamf macOS management platform.
owasp-change.github.io
An Open Letter to the OWASP Board
CANalyse-2.0
A vehicle network analysis and attack tool.