Giter VIP home page Giter VIP logo

bheem's Introduction

Hi there ๐Ÿ‘‹, My Name is Harsh

Senior Security Consultant @RedHuntLabs | Core Team Lead & Pentester @Cobalt.io | Synack Red Team Member | Author | Blogger | Speaker

I am working as a Security Engineer with significant expertise in the Web application, API, Android applications, Thick Client & Network Penetration Testing. I have over 5+ years of experience in Cyber Security & Penetration Testing. I have authored multiple books on ethical hacking. I do bug bounties, and I am one of the top 150 researchers on Bugcrowd. I have delivered talks at various security conferences. I do write blogs about security findings on medium & also published many mindmaps.

Skills: Penetration Testing - Web Application | API | Mobile (iOS & Android) | Thick Client | Internal & External Network | Cloud & Containers

  • ๐Ÿ”ญ Iโ€™m currently working on SecurityExplained
  • ๐ŸŒฑ Iโ€™m currently learning Web3 Security
  • ๐Ÿ’ฌ Ask me about Penetration Testing & Bug Bounty
  • ๐Ÿ“ซ How to reach me: Twitter: @harshbothra_
  • ๐Ÿ˜„ Pronouns: He/Him

github linkedin facebook instagram twitter website

trophy

Top Langs

GitHub stats

GitHub Activity Graph

GitHub metrics

GitHub streak stats

Profile views

bheem's People

Contributors

ajaysenr avatar anugrahsr avatar harsh-bothra avatar kathanp19 avatar mad-robot avatar pleschev avatar ravkishu avatar realarcherl avatar theinfosecguy avatar unstabl3 avatar xavier9909 avatar yogikortisa avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

bheem's Issues

Urls not getting distributed

In the previous version after url extraction was completed, in the Recon folder you could see urls sorted for SQLi, XSS, RCE, Redirect, SSRF, etc
But in this new version it just makes the file and the urls are not getting sorted, all the urls just stay in target.com_final_urls and is not available like in previous version

something wrong when installing nuclei

while executing install.sh, something wrong when installing nuclei.
[install.sh: 21 line ] It says cannot found the nuclei/cmd/nuclei/
Maybe is the nuclei project was changed.

Integrate Jaeles Project

Hi,

Thanks for the tool. I hope you'll add jaeles as it also have some unique signature files ..

https://github.com/jaeles-project/jaeles
https://github.com/jaeles-project/jaeles-signatures

There seems to be some issues with the xss output

The xss output file contains parameters as shown in the screenshot below. Is it a problem with the grep or is it intentionally done? cause that seems bit confusing, how t resolve which parameters resolve to which subdomain?
xss_output

Installation Issue

I configured go and it's path to /usr/local/go/bin
even though i was unable to install BHEEM
BHEEMError

typo in port_scan function in Bheem.sh

in port_scan function in Bheem.sh you are calling subtko.sh instead of portscan.sh

port_scan(){
echo ''
echo "${red} Performing : ${green} Port Scanning ${reset}"
echo '---------------------------------------------------------'
dir=~/arsenal
for target in $urls
do
$dir/subtko.sh $target
done
echo '
'
echo "${green} Completed : ${red} Port Scanning Done ${reset}"
echo '_________________________________________________________'
}

i think it suppose to be

port_scan(){
echo ''
echo "${red} Performing : ${green} Port Scanning ${reset}"
echo '---------------------------------------------------------'
dir=~/arsenal
for target in $urls
do
$dir/portscan.sh $target
done
echo '
'
echo "${green} Completed : ${red} Port Scanning Done ${reset}"
echo '_________________________________________________________'
}

Docker pull is being denied

Error response from daemon: pull access denied for xavier99909/hacktools_bheem, repository does not exist or may require 'docker login': denied: requested access to the resource is denied

SubOver module doesn't seeem to work

The Subover module doesn't seem to work, initially it was related to provider.json after resolving that issue it doesn't seem to work as indented.
Trying to work upon that also trying to put some conditions to stop a specific module in between like by pressing ctrl+c instead of quitting the script it will quite that particular module because nuclie is irritating...it keeps checking for authorization using default credentials.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.