Krishna Kumar

Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes. A comprehensive guide for web application penetration testing and bug bounty hunting, covering methodologies, tools, and resources for identifying and exploiting vulnerabilities.

xalgorix. Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

AI-System-Prompts. XBot - Advanced AI Cybersecurity Agent | Gemini system prompt for automated penetration testing and security assessments

My-Methodologies. Tools and methods that I personally use for Recon and Exploitations

React2Shell. Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)

ejPTv2-Preparation. Made for My Personal Learning.

reconx. 24x7 automated security recon & vulnerability scanner — single Go binary

nucleidast. Automated DAST scanning pipeline: Subdomains → DNS → URLs → uro → Nuclei → Discord

Best-Free-Certifications-Online. Best free Cyber Security Certifications.

eWPT-preparation. For my Personal Preparation.

source-scraper. Scrape Source Code of sensitive files like js, jsp, aspx, json and php using curl.

python. python projects

bugbounty-cheatsheet. A list of interesting payloads, tips and tricks for bug bounty hunters.

software-engineering-sub-fields. sub-fields in software engineering

LFIgo. A faster LFI Fuzzer.

kali-backup-and-restore. A script to backup and restore shell configurations, installed packages, network settings, binaries, dotfiles, cron jobs, firewall rules, and more.

programming-notes.

awesome-bugbounty-tools. A curated list of various bug bounty tools

hacker-roadmap. :pushpin: Your beginner pen-testing start guide. A guide for amateur pen testers and a collection of hacking tools, resources and references to practice ethical hacking and web security.

camscan. IP Camera Security Scanner — Shodan + Minimax M2.7 AI

dat-web. A company registration website.

My-Notes-for-eJPTv2.

formcrawler. crawl the URLs having forms

basic-automations. For Personal Use Only.

Mass-ParamSpider. (Mass) Mining parameters from dark corners of Web Archives

bug-bounty-knowledge-hub. A modern full-stack Bug Bounty Knowledge Hub that aggregates security content from HackerOne, GitHub, Medium, Reddit, and Dev.to

Bountystrike-sh. Poor (rich?) man's bug bounty pipeline

wordswing-privacy. HTML