Siddharth Joshi

JwtAuditor. JWT Auditor – Analyze, break, and understand your tokens like a pro.

XSSNow. Find XSS payloads that actually work by filtering them based on real-world constraints instead of blind payload spraying.

ExecEvasion. ExecEvasion is a lightweight execution-evasion toolkit that generates command variants designed to bypass naive filters and WAF rules by leveraging real shell parsing behavior on Linux and Windows.

formatify. Formatify is a Burp Suite extension that instantly converts HTTP requests into multiple formats like cURL, Python, PowerShell, and more—saving time and streamlining your workflow. 🚀

linux-space-booster. Linux Space Booster is an advanced, secure disk space cleanup utility specifically designed for Linux virtual machines. It intelligently cleans caches, logs, and temporary files to reclaim valuable disk space without risking system stability or user data.

CRTO-CheatSheet. A comprehensive cheatsheet and learning resource created during CRTO preparation after extensive lab practice. This repository contains battle-tested commands, techniques, and methodologies that work in modern enterprise environments.

Snapdroid. Android Snapshot and recording tool

Openapi-Schema-Builder. This tool is designed to seamlessly convert Postman collections into OpenAPI schemas. This conversion is essential for API security testing and integration, especially with tools like Burp Suite that require OpenAPI formats for API documentation uploads.

Dante-My-Way. quick fix scripts for dante labs

pentest-scenario-playbook. A hands-on, scenario-based pentesting playbook for security learners and exam aspirants (OSCP, CRTP, Red Team Ops).

corellium-ios-connect. This script automates the installation and configuration of usbfluxd, usbmuxd, and other necessary tools to connect iOS device of Corellium on a Linux machine, specifically addressing and fixing the usbfluxd installation issue on Kali Linux.

TermNova. 🖥️ Turn boring terminal screenshots into eye-catching animated showcases for READMEs & social media

operation-file-hunt. A vulnerable lab for understanding difference between LFI and File Retrieval

useful-scripts-dump. A collection of handy, no-nonsense scripts to solve everyday problems in Linux environments, DevOps workflows, and security toolchains.

ADCS-Exploitation-Toolkit. Python

Ginger-juice-shop. An Intentionally Vulnerable SSTI application for a beginner to an experienced.

SubEnum. bash script for Subdomain Enumeration

Windows-Local-Privilege-Escalation-Cookbook. Windows Local Privilege Escalation Cookbook

CTF-CheatSheet. All About CTFs

SSTI-Academy.

SecureXPass. Swift

webmin-1.910-rce-python3. Webmin 1.910 - Remote Code Execution - python3 compatible

crest-cpsa. LLM RAG based CREST CPSA Quiz Platform