Prakash Tomar's repositories
0install
A bash script that will automatically install Bug Hunting tools used for recon
awesome-oneliner-bugbounty
A collection of awesome one-liner scripts especially for bug bounty tips.
awesome-osint
:scream: A curated list of amazingly awesome OSINT
DNS-Wordlists
part of my wordlist to bruteforce DNS to find subdoamains.
FinalRecon
OSINT Tool for All-In-One Web Reconnaissance
Gf-Patterns
GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
Git-Secret
Go scripts for finding an API key / some keywords in repository
haklistgen
Turns any junk text into a usable wordlist for brute-forcing.
jsleak
a Go code to detect leaks in JS files via regex patterns
kali-setup-script
Bash script which prepares Kali for a pentest by enabling session logging, installing tools, and making common configuration changes
KingOfBugBountyTips
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
nerdbug
Full Nuclei automation script with logic explanation.
NotesYouDontNeed
Some Notes because I am too lazy to search
OSINT-Framework
OSINT Framework
Reconator
Automated Recon for Pentesting & Bug Bounty
spiderfoot
SpiderFoot, the most complete OSINT collection and reconnaissance tool.
templatesallnuclei
This includes all the templates of nuclei collected from different sources
the-book-of-secret-knowledge
A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.
XSS-Catcher
Find blind XSS but why not gather data while you're at it.