Pinned Repositories
CDNRECON
CDNRECON is a tool that is designed to uncover the origin/backend IP behind a CDN's reverse proxy. It is written in Python3 and uses various techniques such as header analysis and DNS lookups to try and discover the origin IP of a website behind a CDN.
GoogleDorkEngine
Introducing "Google Dork Engine" - your ultimate bug bounty tool! Discover vulnerabilities and sensitive information effortlessly. This website revolutionizes the process by allowing you to open multiple Google Dorks with just one click. Unleash the power of efficient bug hunting and secure your target with ease
JScripter
JScripter is a Python script designed to scrape and save unique JavaScript files from a list of URLs or a single URL.
NucleiFuzzer
NucleiFuzzer is a Powerful Automation Tool for Detecting XSS , SQLI , SSRF , Open-Redirect etc.. Vulnerabilities in Web Applications
Nucleimonst3r
Nucleimonst3r is a powerful vulnerability scanner that can help Bug Bounty Hunters find low hanging fruit vulnerabilities for known CVEs and exploits but also gather all the technology running behind them for further investigation for a potential target.
NucleiUpdate
Update Nuclei with One Click
ParamSpider
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
ParamSpiderr
Mining URLs from Dark Corners of Web Archives for bug hunting / Fuzzing/ Further probing
TheTimeMachine
Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
WebShell
Webshell && Backdoor Collection
PushkraJ99's Repositories
PushkraJ99/ParamSpider
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
PushkraJ99/JScripter
JScripter is a Python script designed to scrape and save unique JavaScript files from a list of URLs or a single URL.
PushkraJ99/.gf
š»100+ gf Patterns š„·š» Just Clone and Use
PushkraJ99/Burpsuitepro
PushkraJ99/Custom-XSS
PushkraJ99/ghauri
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
PushkraJ99/Shodan-Dorker
Easy Shodan Dorking
PushkraJ99/Subdomain-Takeover
Subdomain-Takeover Deface
PushkraJ99/udemy-py
š Udemy downloader with DRM support.
PushkraJ99/WayBackupFinder
A passive way to find backups/ sensitive information.
PushkraJ99/apkscan
Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).
PushkraJ99/Broken-Link-Hijacker
Nafeed-Broken-Link: A Python tool designed to check for broken social media links on a given domain. This script crawls all accessible pages of a specified domain and identifies social media links, reporting their status codes to determine if they are functioning correctly or if they are broken.
PushkraJ99/Bug-Bounty-Resources
Dive into a handpicked selection of tools, guides, and tips tailored for beginners in Bug Bounty and Penetration Testing. šš”ļø
PushkraJ99/Bxss-Sniper
Bxss Sniper: A web application penetration testing tool for Blind XSS detection
PushkraJ99/coffin-nuclei-templates
PushkraJ99/CRACKIT
PushkraJ99/crlfi
PushkraJ99/devaralan
Devaralan is a root domain permutation tool that generates root domain variations by adding prefixes and suffixes using predefined keywords
PushkraJ99/genmap
An automated NMAP python script
PushkraJ99/installtools
a tool to install all the tools
PushkraJ99/priv8-Nuclei
this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..
PushkraJ99/RCE-Shell-Paylods
PushkraJ99/reconizer
Reconizer is all-in-one subdomain enumeration tool that has capabilities to find the maximum number of subdomains of a root domain.
PushkraJ99/SpideyX
SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.
PushkraJ99/ssrfuck
Fuzz for SSRF in a given URL.
PushkraJ99/subfalcon
subfalcon is a subdomain enumeration tool that allows you to discover and monitor subdomains for a given list of domains. It fetches subdomains from various sources [crtsh, hackertargetapi, anubis, alienvault, rappiddns, urlscan ] , saves them to a SQLite database, and can notify updates via Discord.
PushkraJ99/subowner
SubOwner - A Simple tool check for subdomain takeovers.
PushkraJ99/Svg-Exploit-Paylods
PushkraJ99/swaggerhtmli
Swagger UI HTMLi
PushkraJ99/swaggerxss
Swagger UI XSS