nazmul-ethi
I specialize in identifying vulnerabilities in web applications and have experience with common web application vulnerabilities like SQL injection (SQLi), Cross
BANGLADESH
Pinned Repositories
agartha
a burp extension for dynamic payload generation to detect injection flaws (RCE, LFI, SQLi), creates access matrix based user sessions to spot authentication/authorization issues, and converts Http requests to Javascript for further XSS exploitation.
bbFuzzing.txt
Bypass-401-and-403
exploit
ghauri-sqli
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
GoSpider
Gospider - Fast web spider written in Go
HowToHunt
Collection of methodology and test case for various web vulnerabilities.
nmapAutomator
A script that you can run in the background!
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
nazmul-ethi's Repositories
nazmul-ethi/bbFuzzing.txt
nazmul-ethi/Bypass-401-and-403
nazmul-ethi/GoSpider
Gospider - Fast web spider written in Go
nazmul-ethi/HowToHunt
Collection of methodology and test case for various web vulnerabilities.
nazmul-ethi/SQL
nazmul-ethi/SQLmapCheatSheet
nazmul-ethi/active-ip
🕵️♂️🔍 A tool with several scanning techniques that extracts live IP addresses from a list of IP addresses or CIDR notations.
nazmul-ethi/aem-hacker
nazmul-ethi/AllForOne
nazmul-ethi/amass
In-depth attack surface mapping and asset discovery
nazmul-ethi/bbscope
Scope gathering tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!
nazmul-ethi/CloudFlair
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
nazmul-ethi/dfuf
Dump files via Directory Traversal / LFI in a breeze with the help of ffuf
nazmul-ethi/Extract-all-URL-endpoints-from-an-application
Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
nazmul-ethi/gau
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
nazmul-ethi/hacktricks
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
nazmul-ethi/httpx
httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.
nazmul-ethi/nazmul-ethi
Config files for my GitHub profile.
nazmul-ethi/PH
This script will find some basic vulns. I made this script for my daily hunting. The best feature about this script is just run it in background and then analyze the target manually.
nazmul-ethi/ReconAIzer
A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!
nazmul-ethi/regex-tokens
list of regex patterns for oauth / api tokens with provided source
nazmul-ethi/RepeaterSearch
This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response matches a query via simple text matching or Regex.
nazmul-ethi/shuffledns
MassDNS wrapper written in go that allows you to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard handling and easy input-output support.
nazmul-ethi/SSRFPwned
Checks for SSRF using built-in custom Payloads after fetching URLs from Multiple Passive Sources & applying complex patterns aimed at SSRF
nazmul-ethi/SubDomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
nazmul-ethi/Sublist3r
Fast subdomains enumeration tool for penetration testers
nazmul-ethi/Top-recon-Tool
nazmul-ethi/Top11-reconTool
nazmul-ethi/vulnerability-Checklist
This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter
nazmul-ethi/Web-Attack-Cheat-Sheet
Web Attack Cheat Sheet