bhishma14 Goto Github PK

bucketuploader

Test to see if an S3 bucket is misconfigured to allow public uploading of files

bug-bounty

bug-bounty-dorks

List of Google Dorks for sites that have responsible disclosure program / bug bounty program

bug-bounty-labs

All the labs in this repository simulate real world bugs I found in the wild

bugbounty-openvpn-socks

Run all your bug bounty VPN profiles in parallel and expose them via multiple local SOCKS proxies.

burp-dynamic-js

Plugin for Burp Suite Free wich detects dynamic JS generated on the server side

burp-free-hash

As name suggest. Currently in development

burp-header-injector

Burp Free plugin to test for host header injection vulnerabilities. (Development)

burp-reflected-param

Burp reflected parameter finder... to find reflected parameters in responses for Burp Suite Free.

burplog4j2scan

Burpsuite extension for log4j2rce

busbooking

To book the bus

byp4xx

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips tricks and 2454 User-Agents.

can-i-take-over-xyz

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

cdn

Compiles a list of major CDN and WAF subnets.

changeme

A default credential scanner.

chart-of-wordlist

Chart-Of-Wordlist helps to create your own custom wordlist. Also in one repository, you can find a list of awesome wordlist.

clickjackingpoc

A Proof of Concept for Clickjacking Attacks

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

cloudbrute

Awesome cloud enumerator

cloudlist

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

cloudscraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

cloudsploit

Cloud Security Posture Management (CSPM)

code-reviews

code reviews to practice

cors-scanner

A multi-threaded scanner that helps identify CORS flaws/misconfigurations

corsy

CORS Misconfiguration Scanner

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

csrf-poc-creator

A Burp Suite extension for CSRF proof of concepts.

cve-2019-19781

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

cve-2021-31760

Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature

cyfon

bug bounty pull all subdomain data, hacker tools