pareshparmar Goto Github PK

assetfinder

Find domains and subdomains related to a given domain

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks.

bxss

certasset

Takes ip range, Scan all open SSL Certs, Grab Cnames

collabozark

CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.

cryptocat-android

Cryptocat for Android. Easy to use encrypted instant messaging.

domained

Multi Tool Subdomain Enumeration

gmapsapiscanner

html-poc

Proof of concept code for client-side vulnerabilities

insecure-firebase-exploit

A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.

jsonbee

A ready to use JSONP endpoints/payloads to help bypass content security policy of different websites.

karma_v2

⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Rconnaissance (framework)

pyrebase

A simple python wrapper for the Firebase API.

secretz

secretz, minimizing the large attack surface of Travis CI

serpico

SimplE RePort wrIting and COllaboration tool

shuffledns

shuffleDNS is a wrapper around massdns written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

slothy

Open source information gathering tool from publicly available sites against a target domain

sublert

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

travisleaks

A tool to find sensitive keys and passwords in Travis logs

wordlists-20111129

A lists of words based on common web directory and file names lists of words based on common web directory and file names. These wordlists are for Web security testing purpose.

xray

XRay is a tool for recon, mapping and OSINT gathering from public networks.