ipentest Goto Github PK

31-days-of-api-security-tips

This challenge is Inon Shkedy's 31 days API Security Tips.

31days

bbdorks

Added all Google dorks with which to search for bbs

bbt

Tweets with bug bounty tips

bugcrowd

This is the view-source from BC for the part where you need to select the type of vulnerability while submitting a report... Ideally I should have tested for each and every category thats mentioned in the list below!!

chooseani

Automating choosing the right animal C++

cors-exploit

HTML to exploit CORS misconfigurations

cors-poc

This is a poc for CORS

dencoder

zeit.co publish

dns-cache-poisoning-poc

elkstack

All details about how to install, deploy, test the ElasticSearch, LogStash, Kibana stack

entropytester

This tests entropy of your random typing

ezxss

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

github-dorks-for-pentesting

As the name says

github-secrets

Python code to scan github secrets

hacking

All stuff about hacking

homebrewcasks

List of all homebrews for Kali

homeopathy

This is a collection of all the videos, documents and everything else that might help a practitioner

internal-external-urls

If you have a few hundred URLs which you need to parse and see whether they are external facing URLs or internally hosted (intranet-based) then this tool is for you.

justindex

This is an index.html for redirection pocs

knoxss-ug

Documentation for knoXSS tool by @brutelogic

live-recon-with-nahamsec

This is the repo with all the points from various interviews

loginform

login form

mousemover

Mouse mover powershell script for those days

owasp-mstg

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security testing and reverse engineering.

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pgp

My PGP public key

postimg-open

Postimage.org is a free image uploader... It's pretty nice to upload and maintain pics that you want to send to others... Say bug bounty emails etc etc... However, the maintenance is a snag. Postimage expects the owner of the pictures to visit their site at-least once within every 6 months... So once you have a huge set of images, it's pretty cumbersome to do so... this is where the script comes in... It opens the images in a headless browser

recon

Recreating recon without all the fancy ++ stuff in filenames

resume

Adding my resume here