Anmol K Sachan

AI-ML-Free-Resources-for-Security-and-Prompt-Injection. AI/ML Pentesting Roadmap for Beginners

TheTimeMachine. Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

wayBackLister. A New Approach to Directory Bruteforce with WaybackLister v1.0

ThreatTracer. ThreatTracer - A tool to identify CVE by name & version and more by @FR13ND0x7F

WayBackupFinder. A passive way to find backups/ sensitive information.

LLMInjector. Burp Suite Extension for LLM Prompt Injection Testing

JIRAya. JIRA"YA is a vulnerability analyzer for JIRA instances. It runs active scans to identify vulnerabilities by interacting with the host and conducting tests.

CrossInjector. Cross Injector — A Python Script for Cross-Site Scripting (XSS) Detection

CloudFail. Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

CVESeeker. Unveiling Cyber Threats: From assets to Vulnerability Insights

WhatTheCipher. Cipher Suite Checker

secret. Collection of RegEx to fetch sensitive Key and Stuff

MS12-020. CVE -2012-0152

ProjectDork. The Dork Search Tools are designed to help bug bounty hunters and penetration testers find sensitive information and vulnerabilities on web applications.

anmolksachan.github.io. HTML

RecoMation. Recon Automation is a utility for automating reconnaissance for bug bounty hunters, Black Box Penetration testers, red teamers who are performing recon against some web app.

X-Ray-Reveal-Hidden-Bookmarklets. A pair of one-click JavaScript bookmarklets that instantly reveal, enable, and interact with any hidden, disabled, or CSS-blocked elements on a page—perfect for security testing, QA, and debugging.

CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS.

aem-spy. A command-line tool for checking a list of URLs for possible Adobe Experience Manager (AEM) detection.

Blind-SSRF-with-Shellshock-exploitation. Blind SSRF with Shellshock exploitation

HowToHunt. Collection of methodology and test case for various web vulnerabilities.

nuclei-templates.

anmolksachan.

Awesome_GPT_Super_Prompting. ChatGPT Jailbreaks, GPT Assistants Prompt Leaks, GPTs Prompt Injection, LLM Prompt Security, Super Prompts, Prompt Hack, Prompt Security, Ai Prompt Engineering, Adversarial Machine Learning.

WayBackupFinderBurpSuiteExtention.

CVE-2020-2733. Python

dkim-lookup. This Bash script checks the existence and details of DKIM (DomainKeys Identified Mail) records for a given domain. It uses a predefined set of selectors commonly used by various email providers and performs DNS queries to fetch the corresponding DKIM records.

CVE.

c1ph3r-fsocitey.github.io. HTML

RepoReaper. RepoReaper is an automated tool crafted to meticulously scan and identify exposed .git repositories within specified domains and their subdomains.

discovery.sh. Shell

url-prepend-wizard. Python

Payload. HTML

cors-test-script. CORS Test Script

lync-auto-discover. Shell