iamsajidkhan Goto Github PK

30-days-of-hacking

Hello Guys, Im doing a challenge "30 Days of Hacking". I will learn something everyday and whatever i learn i will post it here for the next 30 Days Continuously.

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

android-pentesting-checklist

android_app_security_checklist

Android App Security Checklist

apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

api-securityempire

API Security Projecto aims to present unique attack & defense methods in API Security field

arkime

Arkime (formerly Moloch) is an open source, large scale, full packet capturing, indexing, and database system.

arwad

Advanced Reconnaissance and Web Application Discovery

awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

awesome-shodan-queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

awesome-threat-modelling

A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for learning Threat modeling and initial phases of security review.

awesome-waf

🔥 Everything awesome about web-application firewalls (WAF).

aws-devsecops-factory

Sample DevSecOps pipelines (heavily biased on the "Sec") for various stacks and tools using open-source security tools and AWS native services

bambdas

Bambdas collection for Burp Suite Professional and Community.

batchql

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

bhadra

Bhadra is a Vulnerability Management Platform to handle all security issues

bruteforce-lists

Some files for bruteforcing certain things.

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

collabozark

CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.

cve-2022-44268

A PoC for the CVE-2022-44268 - ImageMagick arbitrary file read

developer-roadmap

Roadmap to becoming a web developer in 2021

devops-directive-terraform-course

devsecops

Ultimate DevSecOps library

docs.hackerone.com

HackerOne Platform Documentation

electriceye

Continuously monitor your AWS attack surface and evaluate services for configurations that can lead to degradation of confidentiality, integrity or availability. All results can be exported to Security Hub, JSON, CSV, Databases, and more for further aggregation and analysis.

file-downloader

freak-tools

Tools to make it all feel easy.

frida-scripts

Frida scripts

fuzzapi

Fuzzapi is a tool used for REST API pentesting and uses API_Fuzzer gem