Shirshak Roy's starred repositories
HackerOneReports
Here you can find mostly all disclosed h1 reports
Conferences
Conference presentation slides
swagger-ui-xss
Swagger UI >=3.14.1 < 3.38.0 XSS payload
Awesome-Bugbounty-Writeups
A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference
bypass-paywalls-chrome
Bypass Paywalls web browser extension for Chrome and Firefox.
CRTP-Notes
Study materials for the Certified Red Team Pentesting (CRTP) exam, covering essential concepts in red teaming and penetration testing
Awesome-Privilege-Escalation
Awesome Privilege Escalation
socialhunter
crawls the website and finds broken social media links that can be hijacked
Red-Teaming-Toolkit
This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.
Bug-Bounty-Methodology
These are my checklists which I use during my hunting.
EyeWitness
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
the-art-of-subdomain-enumeration
This repository contains all the supplement material for the book "The art of sub-domain enumeration"
shuffledns
MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.
Cloud-Free-Tier-Comparison
Comparing the free tier offers of the major cloud providers like AWS, Azure, GCP, Oracle etc.
google-acquisitions
Most of the Google Acquisitions for Bug Bounty Hunter.
Learning-EDR-and-EDR_Evasion
I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning path for me.
red-team-scripts
A collection of Red Team focused tools, scripts, and notes
OSCP-Priv-Esc
Mind maps / flow charts to help with privilege escalation on the OSCP.
oscp_cheatsheet
Commands, snippets, exploits, tools, lists, collections and techniques I used on my journey to becoming an OSCP.