Raunak

Vajra. Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive web-based user interface built with the Python Flask module for a better user experience. The primary focus of this tool is to have different attacking techniques all at one place with web UI interfaces.

Cloud-Pentesting. This repository is in progress, it will keep updating as I come across to new learning materials. Feel free to contribute.

White-box-pentesting. This lab is created to demonstrate pass-the-hash, blind sql and SSTI vulnerabilities

codeza. This tool will scan all the URL's in the file and will provide Content-Length, Status-Code, Server and more.

AzDevRecon. AzDevRecon is a powerful web-based enumeration tool for offensive security professionals, red teamers, and pentesters targeting Azure DevOps. It leverages token-based authentication to uncover projects, repositories, pipelines, secrets, and user permissions helping identify misconfigurations and security gaps in DevOps environments.

Type-juggling. Lab that will help you to understand how type juggling vulnerability works.

MSCodePhish. Dynamic Device Phishing tool that creates a new code only when user clicks on link or email is sent.

shoping_site. dummy shopping site for whitebox pentestig

365-Stealer. 365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.