anshumanbh Goto Github PK

about

A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!

action-builder

A collection of GitHub Actions that can be used to automate the testing, building, and deployment of custom GitHub Actions using workflows

action1

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

amass

In-depth DNS Enumeration and Network Mapping

argo

Get stuff done with container-native workflows for Kubernetes.

argo-cron

argo-cron

aws-scanner

Scans a list of websites for Cloudfront or S3 Buckets

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

blackhat-arsenal-tools

Official Black Hat Arsenal Security Tools Repository

brutesubs

An automation framework for running multiple open sourced subdomain bruteforcing tools (in parallel) using your own wordlists via Docker Compose

cault

docker compose for consul and vault official images

changeme

A default credential scanner.

charts

Curated applications for Kubernetes

cloudflare_enum

Cloudflare DNS Enumeration Tool for Pentesters

corstest

A simple CORS misconfiguration scanner

crossdomainscanner

Python tool for expired domain discovery in crossdomain.xml files

django-defectdojo

DefectDojo is a DevSecOps and vulnerability management tool.

dns_resolver

Simple dns resolver in Go based on miekg/dns.

dnssearch

A subdomain enumeration tool.

docker-lair

Dockerizing the Lair Framework

docker_vault

Docker + Consul + Vault

dockerscan

An example that shows how to use docker-compose to build a simple scanner for dockerized webapps

domain

Setup script for Regon-ng

drupalgeddon2

Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)

drupwn

Drupal enumeration & exploitation tool

example-gcloud

An example workflow, using the GitHub Action, to deploy a static website to an existing Google Kubernetes Engine Cluster

fastsam

Framework for Automated Security Testing that is Scaleable and Asynchronous built on Microservices

git-all-secrets

A tool to capture all the git secrets by leveraging multiple open source git searching tools

git-secrets

Prevents you from committing secrets and credentials into git repositories