#
Starred repositories
A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where we scanned 20k+ public AMIs.
This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs
ScriptSentry finds misconfigured and dangerous logon scripts.
Generate IDN homographs and phishing domains
Scan for sensitive information easily and effectively.
I have collected many Free Resources. Feel free share more resources
anveshan is a completed script that helps to automate your recon process, It finds subdomains, urls, js files, parameters, screenshots, and scan js files source code.
My custom created nuclei for SQLi, bugbounty, pentesting
EDR & Antivirus Bypass to Gain Shell Access
CVE-2024-0044: a "run-as any app" high-severity vulnerability affecting Android versions 12 and 13
GoogleDorker an advance level of cli based Google Dorking Tool
SubOwner - A Simple tool check for subdomain takeovers.
SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.
Self-hosted bug bounty programs that are "scammy" or unethical
Bypass-Four03 is a powerful bash tool designed to help testers bypass HTTP 403 forbidden errors through various path and header manipulation techniques. It also includes fuzzing for HTTP methods an…
Python-based web scraper for a darkweb marketplace on the Tor network.
Basic protection against HTML smuggling attempts.
NetScan CLI is a command-line tool for retrieving and analyzing IP address information. It provides detailed subnet and organization data for given IP addresses using various online services.
403Override is a powerful cybersecurity tool designed to bypass HTTP 403 Forbidden responses, enabling secure access to restricted resources.
Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scenarios.
Malicious PDF files recently considered one of the most dangerous threats to the system security. The flexible code-bearing vector of the PDF format enables to attacker to carry out malicious code …