Anmol K Sachan

AI-ML-Free-Resources-for-Security-and-Prompt-Injection. AI/ML Pentesting Roadmap for Beginners

TheTimeMachine. Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not

wayBackLister. A New Approach to Directory Bruteforce with WaybackLister v1.0

ThreatTracer. ThreatTracer - A tool to identify CVE by name & version and more by @FR13ND0x7F

WayBackupFinder. A passive way to find backups/ sensitive information.

LLMInjector. Burp Suite Extension for LLM Prompt Injection Testing

CrossInjector. Cross Injector — A Python Script for Cross-Site Scripting (XSS) Detection

JIRAya. JIRA"YA is a vulnerability analyzer for JIRA instances. It runs active scans to identify vulnerabilities by interacting with the host and conducting tests.

CloudFail. Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network

CVESeeker. Unveiling Cyber Threats: From assets to Vulnerability Insights

WhatTheCipher. Modern TLS/SSL assessment framework - protocols, ciphers, certificates, grading & reports.

secret. Collection of RegEx to fetch sensitive Key and Stuff

MS12-020. CVE -2012-0152

ProjectDork. The Dork Search Tools are designed to help bug bounty hunters and penetration testers find sensitive information and vulnerabilities on web applications.

anmolksachan.github.io. HTML

RecoMation. Recon Automation is a utility for automating reconnaissance for bug bounty hunters, Black Box Penetration testers, red teamers who are performing recon against some web app.

X-Ray-Reveal-Hidden-Bookmarklets. A pair of one-click JavaScript bookmarklets that instantly reveal, enable, and interact with any hidden, disabled, or CSS-blocked elements on a page—perfect for security testing, QA, and debugging.

CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS.

aem-spy. A command-line tool for checking a list of URLs for possible Adobe Experience Manager (AEM) detection.

Blind-SSRF-with-Shellshock-exploitation. Blind SSRF with Shellshock exploitation

HowToHunt. Collection of methodology and test case for various web vulnerabilities.

nuclei-templates.

anmolksachan.

Awesome_GPT_Super_Prompting. ChatGPT Jailbreaks, GPT Assistants Prompt Leaks, GPTs Prompt Injection, LLM Prompt Security, Super Prompts, Prompt Hack, Prompt Security, Ai Prompt Engineering, Adversarial Machine Learning.

WayBackupFinderBurpSuiteExtention.

CVE-2020-2733. Python

dkim-lookup. This Bash script checks the existence and details of DKIM (DomainKeys Identified Mail) records for a given domain. It uses a predefined set of selectors commonly used by various email providers and performs DNS queries to fetch the corresponding DKIM records.

CVE.

c1ph3r-fsocitey.github.io. HTML

RepoReaper. RepoReaper is an automated tool crafted to meticulously scan and identify exposed .git repositories within specified domains and their subdomains.

discovery.sh. Shell

url-prepend-wizard. Python

Payload. HTML

cors-test-script. CORS Test Script

lync-auto-discover. Shell