Arfat Khan's Projects
ElasticSearch exploit and Pentesting guide for penetration tester
This script Crawl the website and find the urls that contains html forms.
Tips and Tutorials for Bug Bounty and also Penetration Tests.
A list of Google Dorks for Bug Bounty, Web Application Security, and Pentesting
Hack-the-Box-OSCP-Preparation
This Repo consists writeups of HackTheBox machines that I've solved while preparing for OSCP.
Collection of methodology and test case for various web vulnerabilities.
Self contained htaccess shells and attacks
Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.
This is a python wrapper around the amazing KNOXSS API by Brute Logic
Fetch many paths for many hosts - without killing the hosts
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.
A script that you can run in the background!
Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!
Nuclei Templates Collection
Bug Bounty Vps Setup Tools
Rockyou for web fuzzing
OS Command Injection Vulnerability Payload List
OWASP based Web Application Security Testing Checklist
Single-file PHP shell
Filter URLs to save your time.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
A public collection of POCs & Exploits for the vulnerabilities I discovered
:boom: :dizzy: Extract or export video links from a YouTube Playlist.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent