vikasvarshney Goto Github PK

pwn_jenkins

Notes about attacking Jenkins servers

qemu-vm-escape

recondog

Recon Dog is an all in one tool for all your basic information gathering needs.

reconpi

ReconPi - A lightweight recon tool that performs extensive scanning with the latest tools.

red-teaming-toolkit

A collection of open source and commercial tools that aid in red team operations.

research

research

resources-for-beginner-bug-bounty-hunters

A list of resources for those interested in getting started in bug bounties

retirejs

s3-buckets-finder

Find aws s3 buckets and extract datas.

salsa-tools

Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched

seclists

SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

secretz

secretz, minimizing the large attack surface of Travis CI

security-writeups

These are some of the security writeups I have done, to ensure that my understanding of certain vulnerabilities are clear!

shodansploit

🔎 shodansploit > v1.3.0

sic

A tool to perform Sequential Import Chaining

smali_emulator

This software will emulate a smali source file generated by apktool.

spartan

My Recon Automation

spring-boot-actuator-exploit

Spring Boot Actuator (jolokia) XXE/RCE

sqlinjection-training-app

A simple PHP application to learn SQL Injection detection and exploitation techniques.

ssrf-sheriff

A simple SSRF-testing sheriff written in Go

ssrf-testing

SSRF (Server Side Request Forgery) testing resources

ssrftest

SSRF testing tool

ssrf_vulnerable_lab

This Lab contain the sample codes which are vulnerable Server-Side Request Forgery attack

ssti

ssti-payload

SSTI Payload Generator

subenum

Small Python script used to bruteforce subdomain names of a specified domain.

sudo_inject

[Linux] Two Privilege Escalation techniques abusing sudo token

svg-cheatsheet

A cheatsheet for exploiting server-side SVG processors.

swiftnessx

A cross-platform note-taking & target-tracking app for penetration testers.

test