Pinned Repositories
Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
AarogyaSetu_Android
Aarogya Setu Android app native code
Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
android_application_analyzer
The tool is used to analyze the content of the android application in local storage.
Bug-bounty
Ressources for bug bounty hunting
BurpSuite-Secret_Finder
PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Quick-GO
Install GO in Ubuntu
vijithvellora's Repositories
vijithvellora/Quick-GO
Install GO in Ubuntu
vijithvellora/AarogyaSetu_Android
Aarogya Setu Android app native code
vijithvellora/Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
vijithvellora/android_application_analyzer
The tool is used to analyze the content of the android application in local storage.
vijithvellora/Bug-bounty
Ressources for bug bounty hunting
vijithvellora/BurpSuite-Secret_Finder
vijithvellora/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
vijithvellora/cloudsploit
Cloud Security Posture Management (CSPM)
vijithvellora/echo-server
An HTTP and WebSocket "echo" server for testing proxies and HTTP clients.
vijithvellora/fileGPS
A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
vijithvellora/GCP-Pentest-Checklist
vijithvellora/Genymotion_ARM_Translation
👾👾 Genymotion_ARM_Translation Please enjoy！
vijithvellora/Gf-Patterns
GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic) parameters grep
vijithvellora/heartbleed-PoC
:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:
vijithvellora/HTTPLeaks
HTTPLeaks - All possible ways, a website can leak HTTP requests
vijithvellora/Insecure-Firebase-Exploit
A simple Python Exploit to Write Data to Insecure/vulnerable firebase databases! Commonly found inside Mobile Apps. If the owner of the app have set the security rules as true for both "read" & "write" an attacker can probably dump database and write his own data to firebase db.
vijithvellora/KingOfBugBountyTips
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
vijithvellora/Osmedeus
Fully automated offensive security framework for reconnaissance and vulnerability scanning
vijithvellora/portfolio
vijithvellora/ssrf-finder
Pass list of urls with FUZZ in and it will check if it has found a potential SSRF.
vijithvellora/subfinder
Subfinder is a subdomain discovery tool that discovers valid subdomains for websites. Designed as a passive framework to be useful for bug bounties and safe for penetration testing.
vijithvellora/weaponised-XSS-payloads
XSS payloads designed to turn alert(1) into P1
vijithvellora/wfuxx
web-based-fuzzer