yugansh23

Public-OSCP-Notes

My Public notes for OSCP

OSCP-Tricks-2023

OSCP 2023 Preparation Guide | Courses, Tricks, Tutorials, Exercises, Machines

free-API-security-test-action

APIsec|SCAN - Free API security testing using Github actions

CSPReconGO

OSCP

#cheat sheet for OSCP

Priv8-Nuclei-Templates

My Priv8 Nuclei Templates

google-dorks

Useful Google Dorks for WebSecurity and Bug Bounty

Nuclei-Templates

S3Scanner

Scan for misconfigured S3 buckets across S3-compatible APIs!

Advanced-SQL-Injection-Cheatsheet

A cheat sheet that contains advanced queries for SQL Injection of all types.

Jira-Lens

Fast and customizable vulnerability scanner For JIRA written in Python

403bypasser

Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.

Recon-bugbounty

Simple recon using multiple tools!

lorsrf

Fast CLI tool to find the parameters that can be used to find SSRF or Out-of-band resource load :artificial_satellite: :crab:

Resources-for-Beginner-Bug-Bounty-Hunters

A list of resources for those interested in getting started in bug bounties

git-dumper

A tool to dump a git repository from a website

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

OSCPRepo

A list of commands, scripts, resources, and more that I have gathered and attempted to consolidate for use as OSCP (and more) study material. Commands in 'Usefulcommands' Keepnote. Bookmarks and reading material in 'BookmarkList' CherryTree. Reconscan Py2 and Py3. Custom ISO building.

AutoRecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

SSRFmap

Automatic SSRF fuzzer and exploitation tool

gitleaks

Protect and discover secrets using Gitleaks 🔑

MobileApp-Pentest-Cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

RMS-Runtime-Mobile-Security

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

31-days-of-API-Security-Tips

This challenge is Inon Shkedy's 31 days API Security Tips.

Guide-to-SSRF

Guide to SSRF

Bheem