panckazzz

XSStrike

XSS Scanner equipped with powerful fuzzing engine & intelligent payload generator

Spring4Shell-POC

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit

agentic_security

Agentic LLM Vulnerability Scanner

alpha-stage-scripts

Repo contains a list of random scripts that I use while testing out random things.

Android_Security

This repository is a suplimentary material for Android Training's done by Anant Shrivastava

API-Security-Checklist

Checklist of the most important security countermeasures when designing, testing, and releasing your API

Astra

Automated Security Testing For REST API's

aws-nuke

Nuke a whole AWS account and delete all its resources.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

CISSP-Study-Guide

study material used for the 2018 CISSP exam

CloudPentestCheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

credential-digger

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:

CTF

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

dockerlabs

Docker | Kubernetes - Beginners | Intermediate | Advanced

free-API-security-test-action

APIsec|SCAN - Free API security testing using Github actions

gdpr-checklist

The GDPR Checklist

getaltname

Extract subdomains from SSL certificates in HTTPS sites.

Java-Deserialization-Cheat-Sheet

The cheat sheet about Java Deserialization vulnerabilities

Java-Deserialization-Scanner

All-in-one plugin for Burp Suite for the detection and the exploitation of Java deserialization vulnerabilities

my-arsenal-of-aws-security-tools

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

mySapAdventures

A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters

nahamsec.training

The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

OWASP-Nettacker

Automated Penetration Testing Framework

poc

poc file

Security-Research

Exploits written by the Rhino Security Labs team

Serpico

SimplE RePort wrIting and COllaboration tool

setting-up-an-open-source-project

:repeat: Setting Up An Open Source Project

TestSSL

vapi

vAPI is a Vulnerable Adversely Programmed Interface which is Self-Hostable PHP Interface that demonstrates OWASP API Top 10 in the means of Exercises.

XSS-exploit

XSS Injection based keylogger