amirhosseinbidokhti Goto Github PK

abusing-reverse-proxies

assetwatcher

A tool to notify you of the latest changes in bug bounty programs.

burpcertificate

System-level trusted BurpSuite Certificate for Android 7+

cdnexcluder

With this tool you can spot the CDN IPs and exclude them from your target list.

chromeplatformswitcher

Simple chrome extension to spoof and switch your "navigator.platform" to trick some PWAs which restricts access from none mobile devices.

cors-misconfig-exploits

csrf-exploits

Handy CSRF exploits based on the HTTP request.

domain-discovery-recon-examples

Discovering the domain of the following companies (cafebazaar.ir, snapp.ir, Sony, Walmart)

e-commerce-untill-redux-thunk-container-pattern

from-callbacks-to-async-await

Learn behind the scenes of async JS with examples that get refactored all the way from callbacks to promises and the most beautiful way to consume them (the async await)

gym-management-app

h1reports

A crawler for most recent disclosed reports on Hackerone.

holytips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

hoo-club-react

paramaker

A handy tool to generate parameters and values to append to a given url

parse-nmap-result

pidcat

Colored logcat script which only shows log entries for a specific application package.

postmessage-demo

sass-7-1

Sample UI project written with 7-1 Sass and BEM architectures in mind.

scopenotifier

Getting the latest scopes (domains that are eligible for bug bounty reports) of top bug bounty platforms such as H1, Bugcrowd, and more

twittermassfollow

If you are lazy to manually follow a big list of accounts on twitter, use this tool.

urluniquifier

Detach duplicate URLs from provided input/file

writeupnotifier

Gathering the latest infosec writeups