gamersushil

Sushil Ram's starred repositories

semgrep

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Language:OCamlLGPL-2.110125 103 2920

Mindmap

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them

6429 203 12

SpringBootVulExploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

Language:Java5661 100 8

feroxbuster

A fast, simple, recursive content discovery tool written in Rust.

Language:RustMIT5612 52 285

pspy

Monitor linux processes without root permissions

Language:GoGPL-3.04769 51 12

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

Language:RubyMIT3738 126 30

kiterunner

Contextual Content Discovery Tool

Language:GoAGPL-3.02540 40 48

vulnerability-Checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

2255 47 2

firefox_decrypt

Firefox Decrypt is a tool to extract passwords from Mozilla (Firefox™, Waterfox™, Thunderbird®, SeaMonkey®) profiles

Language:PythonGPL-3.01942 48 75

awesome-devops

A curated list of awesome DevOps platforms, tools, practices and resources

Language:PythonCC0-1.01855 43 102

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

Language:PythonMIT1756 32 17

top25-parameter

For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

NOASSERTION1665 44 5

reFlutter

Flutter Reverse Engineering Framework

Language:PythonGPL-3.01592 26 95

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Language:GoMIT1294 14 12

akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

Language:JavaMIT919 16 148

offensive-bookmarks

A collection of bookmarks for penetration testers, bug bounty hunters, malware developers, reverse engineers and anyone who is just interested in infosec topics.

Language:HTMLGPL-3.0885 130

Frida-Labs

The repo contains a series of challenges for learning Frida for Android Exploitation.

MIT814 80

PMAT-labs

Labs for Practical Malware Analysis & Triage

Language:HCL806 20 6

surf

Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

Language:Go521 8 1

android-unpinner

Remove Certificate Pinning from APKs

Language:JavaScript387 100

websitesVulnerableToSSTI

Simple websites vulnerable to Server Side Template Injections(SSTI)

Language:PHPApache-2.0365 8 5

Vulnerabilities-Unmasked

This repo tries to explain complex security vulnerabilities in simple terms that even a five-year-old can understand!

363 70

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification

Language:C++283 16 25

CRTP-Notes

Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing

266 3 1

vet

Tool to achieve policy driven vetting of open source dependencies

Language:GoApache-2.0196 7 60

ADCheatSheet

Active Directory Cheat Sheet

Language:PowerShell139 70

CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an HTTP server and a DNS server, providing complete responses and valuable insights during your testing process.

Language:GoMIT118 2 3