A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Access large language models from the command-line

Ollama Python library

HTTP parameter discovery suite.

Compilation of Resources from TCM's Practical Ethical Hacking Udemy Course

A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.

Volatility 3.0 development

A tool to dump a git repository from a website

Hunspell UTF8 dictionaries. These work with Sublime Text. [Spell check]

A collection of AWS penetration testing junk

LinkedIn Recon Tool

Open-source vulnerability disclosure and bug bounty program database

My collection of various security tools created mostly in Python and Bash. For CTFs and Bug Bounty.

recon for bug hunters

A Python library for scraping the Google search engine.

Writeups of challenges and CTFs I participated in

Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.