Kathan Patel

HowToHunt. Collection of methodology and test case for various web vulnerabilities.

JSFScan.sh. Automation for javascript recon in bug bounty.

Gxss. A tool to check a bunch of URLs that contain reflecting params.

gaussrf. Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

BreachedDataScraper. Search breached data on private nodes, darkweb, internet, end-to-end channels

protoscan. Prototype Pollution Scanner

portscan.sh. All in one port scanning script.

waybackfetch. Tool for fetching all the available waybackmachine snapshot urls

OpenBB-Scope. OpenBugBounty - https://www.openbugbounty.org/ programs list

Python_For_Pentester. Programs I Made while learning python for pentesters.

bash_script_templates. Some Templates for Bash Scripting

KathanP19.

Bheem. Shell

wordlists. Wordlists for Fuzzing

hackerone_wordlist. The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform

SecurityTesting. Shell

pwndb. Search for leaked credentials

reconftw. ReconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

AndroidCTF. Different Android Challenges I solved.

Portscanner. A Simple Port Scanner with Multi-Threading And User Define Port Range

learnwebscraping. this are some web scrapers i built during learning web scraping

Bug-bounty. Ressources for bug bounty hunting

bruteforce-lists. Some files for bruteforcing certain things.

scripthunter. Tool to find JavaScript files on Websites

xssXD. Go

frogy-subdomain-enumeration. My subdomain enumeration

Magic-CheckList-for-Web-Applications. Web Security Checklist (Bug Bounty & Pentesting)

15_Python_Projects. Jupyter Notebook

Garud. An automation tool that scans sub-domains, sub-domain takeover and then filters out xss, ssti, ssrf and more injection point parameters.

Parse_Apache_Log. Simple Python Script to Parse Apache Log, Get all Unique IPs and Urls visited by that IP.

web-cache-deception-checker. Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages

WayRobots. Tool to find stored robots.txt files from the past

analyzeJS. A tools for JavaScript Recon

sillydadddy.github.io. Ruby

mildew. Dotmil subdomain discovery tool that scrapes domains from official DoD website directories and certificate transparency logs

Oralyzer. Open Redirection Analyzer

SpotiHook. A Spotify hook that cracks DRM protection and allows to download songs.

rb-recon.

cazador_unr. Hacking tools

autoRecon. This tool is for automate the initial things that we usually do in daily pentesting. So you can focus more on the main target.

GOAD. game of active directory

cvebase.com. cvebase is a community-driven vulnerability data platform to discover the world's top security researchers and their latest disclosed vulnerabilities & PoCs

hostinjector. Multithreaded Host Header Redirection Scanner

learning-golang. Small program made while learning golang.

Sublist3r. Fast subdomains enumeration tool for penetration testers

Bluto. DNS Recon | Brute Forcer | DNS Zone Transfer | DNS Wild Card Checks | DNS Wild Card Brute Forcer | Email Enumeration | Staff Enumeration | Compromised Account Checking

tko-subs. A tool that can help detect and takeover subdomains with dead DNS records

AttackSurfaceMapper. AttackSurfaceMapper is a tool that aims to automate the reconnaissance process.

Presentation_Scripts_PPTs. C

Subdomain. Hacks For Subdomain Enumeration

LazyRecon. An automated approach to performing recon for bug bounty hunting and penetration testing.