faisalrathore Goto Github PK

jaeles

The Swiss Army knife for automated Web Application Testing

js-parse

Find subdomains, relative urls, parameter, custom headers and api keys in javascript files

jsa

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

jsfscan.sh

jsmon

a javascript change monitoring tool for bugbounties

katakana.js

Write JavaScript alert(1) with Katakana characters only

kenzer

automated web assets enumeration & scanning

kerbrute

A tool to perform Kerberos pre-auth bruteforcing

keye

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on their response's body length.

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

kxss

This a adaption of tomnomnom's kxss tool with a different output format

lazycsrf

A more useful CSRF PoC generator on Burp Suite

lilly

Tool to find the real IP behind CDNs/WAFs like cloudflare using passive recon by retrieving the favicon hash. For the same hash value, all the possible IPs, PORTs and SSL/TLS Certs are searched to validate the target in-scope.

linkjs

linux-default-files-images-location

Default Linux files/images location

maha

malicious-pdf

Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator

mole

Mole is a framework for identifying and exploiting out-of-band application vulnerabilities.

my-notes

This repo have all my infosec notes

nuclei-temp

nuclei-templates

Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.

oauth-2.0-security-cheat-sheet

oauth security guidelines

onefuzz

A self-hosted Fuzzing-As-A-Service platform

packetstorm-exploits

Collection of publicly available exploits from Packetstorm

parameterminer

Built on a lazy Sunday after seeing this tweet (https://twitter.com/intigriti/status/1272145863868104705?s=20) I present to you, ParameterMiner! Pipe in a list of javascript urls and ParameterMiner pulls all the variable names.

pathbrute

Pathbrute

personal-security-checklist

🔒 A curated checklist of 100+ tips for protecting digital security and privacy in 2020

php-jpeg-injector

Injects php payloads into jpeg images

ppscan

Client Side Prototype Pollution Scanner