okaayfine's Projects
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
EarlyBird is a sensitive data detection tool capable of scanning source code repositories for clear text password violations, PII, outdated cryptography methods, key files and more.
Here I gather all the resources about PenTesting and Bug Bounty Hunting that I find interesting
Remote Code Execution EJS Web Applications using express-fileupload
An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet ๐
Enumerating IPs in X-Forwarded-Headers to bypass 403 restrictions
Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.
This is a personal repo containing scripts in py for detecting shells on vuln exchange servers.
A Firefox Web Extension to improve the discovery of DOM XSS.
Kumpulan Exploit Wordpress Plugins + Tools + and cara penggunaannya
EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
Facebook Bug Bounties
Server and avi file to exploit FFmpeg HLS parse
ไพฆๆฅๅฎๅซ(ObserverWard)็ๆ็บนๅบ
AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
Empower your hosting business with FOSSBilling, the free and open-source solution for efficient billing and client management.
A list of SaaS, PaaS and IaaS offerings that have free tiers of interest to devops and infradev
Potentially dangerous files
Tips and Tutorials for Bug Bounty and also Penetration Tests.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
Tools to perform basic search on GitHub.
Reconnaissance tool for GitHub organizations
Goblyn is a Python tool focused to enumeration and capture of website files metadata.
This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
Grafana Unauthorized arbitrary file reading vulnerability
Blazing fast, instant realtime GraphQL APIs on Postgres with fine grained access control, also trigger webhooks on database events.