rajat-kanti-dutta Goto Github PK

allthingsssrf

This is a collection of writeups, cheatsheets, videos, books related to SSRF in one single location

android-penetration-testing

android-reports-and-resources

A big list of Android Hackerone disclosed reports and other resources.

awesome-mobile-ctf

This is a curated list of mobile based CTFs, write-ups and vulnerable apps. Most of them are android based due to the popularity of the platform.

awesome-sec-talks

A collected list of awesome security talks

awesome-waf

🔥 Everything about web-application firewalls (WAF).

awesomexss

Awesome XSS stuff

be-a-hacker

bug-bounty-reference

Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature

bug-bounty-roadmaps

Bug Bounty Roadmaps

bug-bounty-wordlists

A repository that includes all the important wordlists used while bug hunting.

clairvoyance

Obtain GraphQL API schema despite disabled introspection!

client-side-prototype-pollution

Prototype Pollution and useful Script Gadgets

ctf-katana

This repository aims to hold suggestions (and hopefully/eventually code) for CTF challenges. The "project" is nicknamed Katana.

damn-vulnerable-graphql-application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

dirsearch

Web path scanner

dompurify

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

en.javascript.info

Modern JavaScript Tutorial

exploit-workshop

A step by step workshop to exploit various vulnerabilities in Node.js and Java applications

firebasecrud

firebasefileuploaddemo1

First Version without ProgressBar

firebaseuserloginusingphoto

User Registration Using FireBase

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

generic-university

Vulnerable API

graphql-engine

Blazing fast, instant realtime GraphQL APIs on your DB with fine grained access control, also trigger webhooks on database events.

h4cker

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

hacker101

Source code for Hacker101.com - a free online web and mobile security class.

information-security

A place where I can create, collect and share tooling, resources and knowledge about information security.

java-serialized-payloads

YSOSERIAL Integration with burp suite

javascript-interview-questions-for-students

List of 1000 JavaScript Interview Questions