saurabh96216 Goto Github PK

10-reset-password-flaws

10 Reset Password Flaws Based on Web Application Security

allaboutbugbounty

All about bug websites (bypasses, payloads, and etc)

apac-firms

A list of Information Security firms operating in th Asia-Pacific region, and where student intake opportunities can be found.

astra

Automated Security Testing For REST API's

auto-enum

This is a script that runs an auto-enumeration on all the well known OWASP vulnerabilities. Primarily for low-hanging fruit in Bug Bounties. Primarily successful with XSS/SQLI and XXE vulnerabilities. Not very fluid with headers/cookies.

autopoisoner

Web cache poisoning vulnerability scanner.

autoredirect

Smart and efficient tool to automate open redirect detection at scale.

autossrf

Smart context-based SSRF vulnerability scanner.

awesome

😎 Awesome lists about all kinds of interesting topics

awesome-bugbounty-tools

A curated list of various bug bounty tools

basecrack

Decode All Bases - Base Scheme Decoder

bash_scripting

bash scripting thing !

blinder

A Tool Written In Python3 To Send Blind Payloads On The Request Headers Maybe Stored On The Logs.

bot-bounty

Python Script for Telegram Bot is specially built for pentest & bug bounty. It's like a telegram shell.

breacher

An advanced multithreaded admin panel finder written in python.

bug-bounty-automation

changeme

A default credential scanner.

crest-cpsa

Project to train for CREST CPSA exam

crlfi

CRLF Bug scanner for WebPentesters and Bugbounty Hunters

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

cs-video-courses

List of Computer Science courses with video lectures.

dnscan

dnstake

DNSTake — A fast tool to check missing hosted DNS zones that can lead to subdomain takeover

domain2ip-converter

Convert domain lists to resolved IP without duplicated, useful for strong large recon, and Bug Bounty

escalating-self-xss-to-account-takeover

This repository contains complete source code for setting up the environment and exploit code for the vulnerability.

fuzz.txt

Potentially dangerous files

github-endpoints

Find endpoints on GitHub.

github-subdomains

Find subdomains on GitHub

gittools

A repository with 3 tools for pwn'ing websites with .git repositories available

grapx

grapX will iterate through the URLs and grep the endpoints with all possible extensions.