shubhamgupta0x0 Goto Github PK

cloudpentestcheatsheets

This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage cloud providers.

cors-one-liner

A one liner Bash command which finds CORS in every possible endpoint.

corsme

Cross Origin Resource Sharing MisConfiguration Scanner

cs-suite

Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.

cyberrange

The Open-Source AWS Cyber Range

damocles

python tool

defcon-26-workshop-attacking-and-auditing-docker-containers

DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source

docker-pentesting

extract-relative-url-heapsnapshot

Extract relative urls from a heap snapshot

fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

gf-patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

gf-secrets

Secret and/ credential patterns used for gf.

gitscraper

A tool which scrapes public github repositories for common naming conventions in variables, folders and files

go-stare

A fast & light web screenshot without headless browser but Chrome DevTools Protocol!

gobuster

Directory/File, DNS and VHost busting tool written in Go

goop

Google Search Scraper

gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

graphql-playlist

All course files for the GraphQL tutorial playlist on The Net Ninja YouTube channel.

grepthecurl

One liner regex match to search inside JS files, using curl and grep!

h4cker

This repository is primarily maintained by Omar Santos and includes resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

h5sc

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

hackthebox-writeups

Writeups for HacktheBox 'boot2root' machines

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.

homebrew-kali

A Homebrew Tap for Kali Linux tools on OS X

howtohunt

Some Tutorials and Things to Do while Hunting That Vulnerability.

html5_attack_and_secure

HTML5 Training material for Attack and Secure training sessions.

hugo-initio

Hugo Theme adaptation of Initio from GetTemplate

iac-bc-1000files

iac-bc-100mbtest