saurabh96216 Goto Github PK

headerssrfxd

Scan ssrf on headers. Inspired by the tool https://github.com/m4ll0k/Bug-Bounty-Toolz/blob/master/ssrf.py

headi

Customisable and automated HTTP header injection

jsa

Javascript security analysis (JSA) is a program for javascript analysis during web application security assessment.

keywords

learn365

This repo is about @harshbothra_ 365 days of learning Tweet & Mindmap collection

lfifreak

A unique automated LFi Exploiter with Bind/Reverse Shells

liffy

Local file inclusion exploitation tool

logsensor

A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

nuclei-templates

My own Custom nuclei templates

nuubi

Nuubi Tools (Information-ghatering|Scanner|Recon.)

oscp

OSCP

otxurls

Fetch known urls from AlienVault's Open Threat Exchange for given hosts

password-list

Password lists with top passwords to optimize bruteforce attacks

pentest-tools

Custom pentesting tools

recon

recon-007

Bug Bounty tool to automate the recon process.

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

redirectcheck

A Golang Open redirect Scanner

s1mr3c

Simple recon tool automates your recon process

scanless

online port scan scraper

scilla

🏴‍☠️ Information Gathering tool 🏴‍☠️ DNS / Subdomains / Ports / Directories enumeration

sef

SEF is a Subdomain Enumeration Framework that covers passive, active & permuted enumeration

sessionprobe

SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applications by taking a session token and checking access across a list of URLs, highlighting potential authorization issues.

shodomain

Shodan subdomain finder

sqlidetector

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

ssrfuck

Fire SSRF payloads everywhere

ssrfuzzer

Parameter fuzzer for finding hidden parameters and SSRF. Useful for bug bounty or external pentest.

ssrfxd

subenum_deep_subdomain_enumeration

In this repo, I have created a subdomain enumeration function that grab subdomains in deep.

tempus

Project Tempus is a recon automation script for bug bounty hunters and penetration testers to assist in the 1st phase of the cyber kill chain