gujjuboy10x00 Goto Github PK

003recon

uhmm, this repository is private. how r u reading this? O.o EDIT: not anymore; enjoy

230-oob

An Out-of-Band XXE server for retrieving file contents over FTP.

amass

In-depth subdomain enumeration written in Go

android-insecurebankv2

Vulnerable Android application for developers and security enthusiasts to learn about Android insecurities

androidpt

methods for android PT

aquatone

A Tool for Domain Flyovers

arjun

Arjun is a HTTP parameter discovery suite.

awesome-jenkins-rce-2019

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

bagbak

Yet another frida based iOS dumpdecrypted. Also decrypts app extensions

bandit

Python AST-based static analyzer from OpenStack Security Group

bbht

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

bhavesh005.github.io

bhaveshlakhani.github.io

bootstrap

The most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web.

bot

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

burp_wp

Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.

circleci-test

cloudflair

🔎 Find origin servers of websites behind by CloudFlare using Internet-wide scan data from Censys.

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and 150 other CMSs

core-rs-albatross

Rust implementation of the Albatross protocol

crlf

csrf

cssinjection

Stealing CSRF tokens with CSS injection (without iFrames)

deriv-com

Deriv.com static content - staging release

dn.nmiq.com

docs.hackerone.com

HackerOne Platform Documentation

ezxss

ezXSS is an easy way to test (blind) XSS

ffmpeg-avi-m3u-xbin

frogy

My subdomain enumeration script. It's unique in the way it is built upon.