Satya Prakash

NucleiFuzzer. NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Redirects, leveraging advanced scanning and URL enumeration techniques

NucleiScanner. NucleiScanner is a Powerful Automation tool for detecting Unknown Vulnerabilities in the Web Applications

ParamSpider. Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

BugBountyTools. A-to-Z Bug Bounty Hunting Tools

Custom-Nuclei-Templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

A-to-Z-Vulnerabilities. This is a Kind of Dictionary which contains all kinds of Web Application and Network Security Vulnerabilities and other security concepts in an Alphabetical Order

fuzzing-templates. Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

JaelesFuzzer. JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

OpenRedirector. OpenRedirector is a powerful automation tool for detecting Open Redirect vulnerabilities in web applications

NetFuzzer. NetFuzzer is a comprehensive network security assessment tool for internal and external network components, including Host Machines, Firewalls, Routers, Switches, Active Directory, SMBs, Printers, etc.

Common-Protocols. A Dictionary of Common-Protocols such as TCP, UDP, ICMP and VoIP

Shodanizer. An advanced automation tool for optimizing Shodan scans, providing swift insights into potential vulnerabilities for both IP addresses and domains

PentestingEverything. Web | Mobile | API | Thick Client | Source Code Review | Wireless | Network Pentesting etc...

awesome-bugbounty-tools. A curated list of various bug bounty tools

wayBackLister. A New Approach to Directory Bruteforce with WaybackLister v1.0

Recon-Tools. Recon-Tools

osmedeus. A Workflow Engine for Offensive Security

NucleiFuzzing. NucleiFuzzing

osint_toolkit. A full stack web application that combines many tools and services for security analysts into a single tool.

Pentest-CheatSheets. A collection of snippets of codes and commands to make your life easier!

Networking-Key-Terminology. Networking Key Terminologies

jaeles-signatures. Default signature for Jaeles Scanner

CVE-2023-33246. CVE-2023-33246 - Apache RocketMQ config RCE

hackGPT. I leverage OpenAI and ChatGPT to do hackerish things

burp-suite-labs. Port Swigger Labs divided on the based of level and topic.

Nuclei-Templates-Collection. Nuclei Templates Collection

freeCodeCamp-Stock-Price-Checker. Freecodecamp - Stock Price Checker

RustScan. 🤖 The Modern Port Scanner 🤖

Vulnerabilities-Unmasked. This repo tries to explain complex security vulnerabilities in simple terms that even a five-year-old can understand!

One-Liners. A collection of one-liners for bug bounty hunting.

Subdomain-Enumeration. Subdomain Enumeration Automation script

xss_payload. 8000+ XSS Payloads

DetectDee. DetectDee: Hunt down social media accounts by username, email or phone across social networks.

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

AllForOne. AllForOne - Nuclei Template Collector

ScanReflectedSSTI. Template Nuclei SSTI

vulnerability-Checklist. This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

httpXplorer. httpXplorer is a web-based application specifically designed for efficient URL management and analysis of the projectdiscovery's httpx tools results. It allows users upload the httpx JSON output file, analyze URLs, status codes, web technologies, other information, sort the URLs based on their status codes, and focus on specific subdomains.

nuclei-templates-initial-access. A standalone collection of widely used technologies with default credentials enabled, which can be utilized for establishing an initial foothold in broad-scope Red-Team engagements, VAPT (Vulnerability Assessment and Penetration Testing), or general bug bounty programs.

awesome-oscp. A curated list of awesome OSCP resources

APKDeepLens. Android security insights in full spectrum.

OWASP-Secure-Coding-Checklist. OWASP Secure Coding Practices Checklist

argus. The Ultimate Information Gathering Toolkit

Windows10Exploits. Microsoft » Windows 10 : Security Vulnerabilities

ghsec-jaeles-signatures. Signatures for jaeles scanner by @j3ssie

xssrecon. XSSRecon automates the process of testing URL parameters for reflection of a test payload rix4uni and further checks how special characters are handled (allowed, blocked, or converted).

Awesome-Bug-Bounty. This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to contribute.

XSpear. 🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

rengine. Python

GarudRecon. An automated recon tool for asset discovery and vulnerability scanning using open-source tools. Supports XSS, SQLi, LFI, RCE, IIS, Open Redirect, Swagger UI, .git exposures and more.

Fast-Google-Dorks-Scan. The OSINT project, the main idea of which is to collect all the possible Google dorks search combinations and to find the information about the specific web-site: common admin panels, the widespread file types and path traversal. The 100% automated.

top25-parameter. For basic researches, top 25 vulnerability parameters that can be used in automation tools or manual recon. 🛡️⚔️🧙

awesome-vulnerable-apps. Awesome Vulnerable Applications

bug-bounty-dorks. List of Google Dorks for sites that have responsible disclosure program / bug bounty program

awesome-api-security. A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

Mobile-Security-Framework-MobSF. Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

BugBase. CTF

web-methodology. Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki

awesome-bughunting-oneliners. A list of Awesome Bughunting oneliners , collected from the various sources