The repo contains all the the notes, slides, and study material for my workshop at DEFCON 32 at the Bug Bounty Village

timebased blind sqli with 99% success rate

List of Directory Traversal/LFI Payloads Scraped from the Internet

POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.

Quick research done on some bug bounty blogs! Check em out :)

this repo contains all types of pdf exploits..

An insane list of all dorks taken from everywhere from various different sources.

recon for bug hunters

Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

CVE-2024-24919 [Check Point Security Gateway Information Disclosure]

Blazing Fast Bytecode-Level Hybrid Fuzzer for Smart Contracts

WordPress Auto Admin Account Creation and Reverse Shell cve-2024-27956 automates the process of creating a new administrator account in a WordPress site and executing a reverse shell on the target …

Burp Plugin to Bypass WAFs through the insertion of Junk Data

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

how to look for Leaked Credentials !

This Repositories contains list of One Liners with Descriptions and Installation requirements

Some files for bruteforcing certain things.

Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers

POC Pdf-exploit builder on C#

Unauthenticated Remote Code Execution – Bricks <= 1.9.6

Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports.

Testing default web credentials

These are my checklists which I use during my hunting.

Reverse proxies cheatsheet