Cyber Security Engineer | Top Ranked Hacker'23 | Secured 100+ Companies | Honored By Government of Dutch, India.
CVE Notifier is designed to monitor and track new CVEs Vulnerabilities. It automatically monitors defined vendors & products for newly discovered CVEs and sends alerts to Slack channel, keeping up-to-date on potential security risks.
Huge Collection of Wordpress Exploits and CVES
This repository contains wordlists for each versions of common web applications and content management systems (CMS). Each version contains a wordlist of all the files directories for this version.
PoC for CVE-2024-23700, Android slient privilege escalation allow to read/write contacts, SMS, calendar, call log and voicemail, make outgoing calls or answer incoming calls, manipulate call settings, access & control notifications sent by other apps, control nearby devices, record audio, access device identifiers, and bypass background restriction
Maven wagon transport for Amazon S3
FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.
This script will crack password protected ZIP files through Bruteforce.
zkSync Era Block Explorer
Community curated list of public bug bounty and responsible disclosure programs.
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
CVE-2017-9805-Exploit
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
Easily manage and switch between multiple Java versions on Linux x86_64 with this convenient script, perfect for code auditing professionals.
Centralized docs of ProjectDiscovery
DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP
This Repo is to Learn API testing and Tools/Reports Related to it
Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit
The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
Subdomain Scanner with Docker & CI/CD
A port scanner that is capable of scanning a host or network for open ports. The port scanner allows users to specify a range of ports to scan, or to scan all 65535 ports.
A packet sniffer for intercepting and logging traffic on a digital network. Utilizes IP packet injection to gather information about network setup, firewall configurations, and intermediate nodes.
Some Tutorials and Things to Do while Hunting That Vulnerability.