Chandrapal Badshah

Awesome-MitM. Curated List of MitM frameworks on GitHub

WinHotspot. A free open source python program to start WiFi hotspot in Windows without any external software

aws-mfa-enforce. Serverless function to automate enforcement of Multi-Factor Authentication (MFA) to all AWS IAM users with access to AWS Management Console.

owasp-mstg. The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

hacks. Go

Dependabot-Dashboard. Python

changeme. A default credential scanner.

owasp-workshop-android-pentest. Learning Penetration Testing of Android Applications

Best-Penetration-Tools-. Best Penetration Tools | أفضل أدوات الاختراق

aws-summarize-account-activity. Analyzes CloudTrail data of a given AWS account and generates a summary of recently active IAM principals, API calls they made, as well as regions, IP addresses and user agents they used.

OSINT-SPY. Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. If you want to ask something please feel free to reach out to me at sharadkumar98780@gmail.com

0xbadshah.

Awesome-Black-Friday-Cyber-Monday. Awesome deals on Black Friday: Apps, SaaS, Books, Courses, etc.

GCP-pentest-lab. A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities

awesome-web-security. 🐶 A curated list of Web Security materials and resources.

metasploitable3. Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

OSINTforPenTests. Slides from my ShellCon Talk, OSINT for Pen Tests, given 10/19.

puppeteer-lambda-starter-kit. Starter Kit for running Headless-Chrome by Puppeteer on AWS Lambda.

IntRec-Pack. Intelligence and Reconnaissance Package/Bundle installer.

go-pillage-registries. Pentester-focused Docker registry tool to enumerate and pull images

bXSS. bXSS is a simple Blind XSS application adapted from https://cure53.de/m

get_schemas. Print out URL schemas from an Android app

Awesome-Asset-Discovery. List of Awesome Asset Discovery Resources

spiderfoot. SpiderFoot, the open source footprinting and intelligence-gathering tool.

ansible-lemp-wp-certbot-playbook. Ansible playbook to deploy a static html, php, php+mysql or wordpress website with Let's Encrypt SSL/TLS certificate

local-sheriff. Think of Local sheriff as a recon tool in your browser (WebExtension). While you normally browse the internet, Local Sheriff works in the background to empower you in identifying what data points (PII) are being shared / leaked to which all third-parties.

Proxy-List. Python program to check accessible proxy sites

WIZwiki-W7500.

shhgit. Find GitHub secrets in real time

003Recon. Some tools to automate recon - 003random

blackhat-arsenal-tools. Official Black Hat Arsenal Security Tools Repository

vuls. Agent-less vulnerability scanner for Linux/FreeBSD/WordPress/Programming language libraries/Network devices

InfoSec-Black-Friday. All the deals for InfoSec related software/tools this Black Friday

prowler. Prowler is an Open Cloud Security tool for AWS, Azure, GCP and Kubernetes. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more.

testing-devcontainer. Python

my-arsenal-of-aws-security-tools. List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

codeql-javascript-unsafe-jquery-plugin. CodeQL

ctfhub. Some Docker for CTF environments

NativePayload_DNS2. C# code for transferring Backdoor Payloads by DNS Traffic (A Records) and Bypassing Anti-viruses

Kotlin. Sample Android apps I made to learn Kotlin

proctor-helm-charts. Smarty

serverless_toolkit. A collection of useful Serverless functions I use when pentesting

protobuf-decoder. A simple Google Protobuf Decoder for Burp

Gorsair. Gorsair hacks its way into remote docker containers that expose their APIs.

android-binaries. Binaries compiled for ARM