Pinned Repositories
awesome-web-security
🐶 A curated list of Web Security materials and resources.
OSCP-Prep
A comprehensive guide/material for anyone looking to get into infosec or take the OSCP exam
Recon
Recon tool for Fun and Fun
Red-Teaming-Toolkit
A collection of open source and commercial tools that aid in red team operations.
reverse-engineering-and-malware-analysis
Course content and slides from my ancient training on Reverse Engineering & Malware Analysis
shubhamgupta0x0's Repositories
shubhamgupta0x0/awesome-android-security
A curated list of Android Security materials and resources For Pentesters and Bug Hunters
shubhamgupta0x0/Awesome-WAF
🔥 Everything awesome about web-application firewalls (WAF).
shubhamgupta0x0/aws_exposable_resources
Resource types that can be publicly exposed on AWS
shubhamgupta0x0/Bridgecrew-iac-test
shubhamgupta0x0/Bugbounty-Resources
A list of resources for those interested in getting started in bug bounties inspired from https://github.com/nahamsec/Resources-for-Beginner-Bug-Bounty-Hunters
shubhamgupta0x0/burpsuite_payloads
shubhamgupta0x0/Ciphey
Automatically decode encryptions without a key, decode encodings, and crack hashes
shubhamgupta0x0/CloudComparer
Compare the various managed cloud services offered by the major public cloud providers in the market.
shubhamgupta0x0/docker-pentesting
shubhamgupta0x0/Gf-Patterns
GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
shubhamgupta0x0/go-stare
A fast & light web screenshot without headless browser but Chrome DevTools Protocol!
shubhamgupta0x0/grepTheCurl
One liner regex match to search inside JS files, using curl and grep!
shubhamgupta0x0/hetty
Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.
shubhamgupta0x0/HowToHunt
Some Tutorials and Things to Do while Hunting That Vulnerability.
shubhamgupta0x0/iac-bc-1000files
shubhamgupta0x0/iac-bc-100mbTest
shubhamgupta0x0/JSFScan.sh
Automation for javascript recon in bug bounty.
shubhamgupta0x0/onefuzz
A self-hosted Fuzzing-As-A-Service platform
shubhamgupta0x0/OneLiners
Simple bash Oneliners to make life easier
shubhamgupta0x0/pentest
Image with the more used tools to create a pentest environment easily and quickly.
shubhamgupta0x0/Pentest-Cheatsheets
shubhamgupta0x0/script-collection
Collection of my scripts ranging from bash or python or shell. Readme will contain list of which script does what.
shubhamgupta0x0/SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
shubhamgupta0x0/security-study-plan
Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...
shubhamgupta0x0/semgrep-rules
Semgrep rules registry
shubhamgupta0x0/Tiny-XSS-Payloads
A collection of tiny XSS Payloads that can be used in different contexts.
shubhamgupta0x0/TLS-poison
shubhamgupta0x0/vulnsearch
A deep look at some recon methodologies and web-application vulnerabilities of my interest where I will merge all my notes gathered from books, videos, articles and own experience with bug bounty hunting / web and network hacking
shubhamgupta0x0/whoxyrm
A reverse whois tool based on Whoxy API.
shubhamgupta0x0/www-project-vulnerability-management-guide
OWASP Foundation Web Respository