rohitansu Goto Github PK

afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.

awesome-ctf

A curated list of CTF frameworks, libraries, resources and softwares

burp-suite-pro

A bash and powershell script to download the latest version of Burp-Suite Professional and use it for free.

burpsuite-for-pentester

This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and completely with "BurpSuite".

ceh-v11-study-guide

cybersecurity_interview_question

interview_question

fbi-tools

🕵️ OSINT Tools for gathering information and actions forensics 🕵️

iphack

Track Location With Live Address And City in Termux

leaked-credentials

how to look for Leaked Credentials !

massive-web-application-penetration-testing-bug-bounty-notes

mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

naabu

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

paramspider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

penetration-testing-interview-questions

Penetration Testing Interview Questions

personal-security-checklist

🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2024

poc-seeker

automated tool designed to streamline the search and identification of Proofs of Concept (POCs)

portswigger-websecurity-academy

Writeups for PortSwigger WebSecurity Academy

reflxss

A basic tool to check for XSS vulnerabilities. It takes a list of URLs and checks if the parameter values appear in the response.

seclists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shuffledns

MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.

subfinder

Fast passive subdomain enumeration tool.

vulnerability-checklist

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

vulnerable-vm

This vulnerable binary will give you a shell of having uid 1001

web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website