Nader Abdi

udp2raw-ansible. Jinja

instagram-persisted-query-diff. Version-to-version diffs of Instagram Android internal API schemas, enabling API change tracking for security research and bug bounty.

x-ui. xray panel supporting multi-protocol multi-user (Vmess & Vless) and IP Restriction

Burp-Suite.

Instagram_SSL_Pinning. Bypass Instagram SSL Pinning on Android

pwncat. pwncat - netcat on steroids with Firewall, IDS/IPS evasion, bind and reverse shell, self-injecting shell and port forwarding magic - and its fully scriptable with Python (PSE)

Ig_api_web. instagram web api

accelerated-mobile-pages. Automatically add Accelerated Mobile Pages (AMP Project) functionality on your WordPress.

dockovpn. 🔐 Out of the box stateless openvpn-server docker image which starts in less than 2 seconds

WebHackersWeapons. ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

instagram-private-api. NodeJS Instagram private API client. Written in TypeScript.

google-crawler. A simple Crawler for getting Google results

traitor. :arrow_up: :skull_and_crossbones: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, polkit, docker socket

MobinetApi. Sample php api client for mobinet.io

PEASS-ng. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

vtdropdown. JavaScript

ezXSS. ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

codeigniter-queue-worker. queue worker

codeigniter-rest. codeigniter rest api

uro. declutters url lists for crawling/pentesting

exploits. Pwn stuff.

XSS-Bypass-Filters.

ffuf-scripts. Scripts to help with different ffuf tasks and workflows

same-site-poc. PHP

dirlister. Create wordlists from source codes files/directories for enumeration

vx-team. HTML

merchant-advcash.

vulnerable-nginx. An intentionally vulnerable NGINX setup