Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.

🔁 Setting Up An Open Source Project

The labs for my Udemy course (https://www.udemy.com/course/intro-to-bug-bounty-by-nahamsec)

The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

Writeup Challenges I have solved in CTF competitions

CTF chall write-ups, files, scripts etc (trying to be more organised LOL)

One stop for Python beginners

Tools for keeping your cloud operating in top form. Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

OpenSSF Scorecard - Security health metrics for Open Source

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

A vulnerability scanner for container images and filesystems

A Proof-Of-Concept for the CVE-2021-44228 vulnerability.

A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models 🔒

This repository is a suplimentary material for Android Training's done by Anant Shrivastava from 2012-2017

Slides, Notes, Tool from BH USA 2015

Docker | Kubernetes - Beginners | Intermediate | Advanced

Automated SonarQube

SimplE RePort wrIting and COllaboration tool

Extract subdomains from SSL certificates in HTTPS sites.

Powershell SAP assessment tool

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

Repo contains a list of random scripts that I use while testing out random things.

This automated tool tries to fetch all the public reports from HackerOne and creates a html file of the report for reference/reading.

pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS, RFC and HDB protocols.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A quick methodology on testing / hacking SAP Applications for n00bz and bug bounty hunters

A collection of AWS penetration testing junk

Exploits written by the Rhino Security Labs team