🔭 Experienced Information Security Consultant
👯 Collaborate on Open Source Projects.
🔒 PentestingEverything - Collection of over 15 types of penetration testing tools and resources.
🛠️ Scripting4Hackers - Awesome resources for learning Python and Bash for hackers.
🔍 SemgrepAnalyzer - Enhanced `Semgrep` tool output in HTML for more visibility.
🖱️ Clickjacking-Poc - Proof of concept for clickjacking vulnerabilities.
🐧 LinuxEnv - Automate Enviromnet Variable configuraiton on Linux OS.
🌐 Segmentation-Testing - Tools and scripts for network segmentation testing.
🗂️ Json2HTML - Convert JSON data into styled HTML.
📄 Word2PDF - Convert Word documents to PDF easily.
🛠️ Scripting4Hackers - Awesome resources for learning Python and Bash for hackers.
🔍 SemgrepAnalyzer - Enhanced `Semgrep` tool output in HTML for more visibility.
🖱️ Clickjacking-Poc - Proof of concept for clickjacking vulnerabilities.
🐧 LinuxEnv - Automate Enviromnet Variable configuraiton on Linux OS.
🌐 Segmentation-Testing - Tools and scripts for network segmentation testing.
🗂️ Json2HTML - Convert JSON data into styled HTML.
📄 Word2PDF - Convert Word documents to PDF easily.
| URL | Description | Credit |
|---|---|---|
| cvss.m14r41.in | CVSS Calculator | cvssjs |
| sqlmap.m14r41.in | Generate SQL Injection payloads | Albert |
| reverse-shell.m14r41.in | Generate reverse shell | 0dayCTF |
| clickjacking.m14r41.in | Clickjacking PoC | M14R41 |
| csrf.m14r41.in | CSRF Generator | f0rb1dd3n0x193 |
| Category | Tools |
|---|---|
| Web Application Pentesting | Burp Suite Pro 🌐, Acunetix 🌐, HCL-AppScan 🌐, Invicti Netsparker 🌐, Fortify WebInspect 🌐, WPScan 🌐, Nikto 🌐, Nuclei 🌐, SQLMap 🌐, OWASP ZAP 🌐, Nmap 🌐, Dirb 🌐, FFUF 🌐, WhatWeb 🌐 |
| Android Security | MobSF 📱, Frida 📱, APKTool 📱, JADX-gui 📱, Android Studio/Genymotion 📱, Drozer 📱, Magisk Root 📱, APKX 📱, mitmproxy 📱, Objection 📱, adb 📱, AndroBugs 📱, Quark Engine 📱, AppMon 📱, ApkScan 📱 |
| iOS Security | MobSF 📲, Frida 📲, Objection 📲, Cycript 📲, iOS Hook 📲, Needle 📲, Class-dump 📲, SSL Kill Switch 2 📲, iMazing 📲, Passionfruit 📲, ios-decrypt 📲 |
| API Pentesting | Postman 📡, Burp Suite Pro 📡, Swagger UI 📡, Kite Runner 📡, Insomnia 📡, GraphQL Voyager 📡, GraphQL Raider 📡 |
| Secure Code Review | SonarQube 🔐, Snyk 🔐, Semgrep 🔐, Fortify-Workbench Audit 🔐, Checkmarx 🔐, Veracode 🔐, CodeQL 🔐, Bandit 🔐, FindSecBugs 🔐, Gitleaks 🔐 |
| Thick Client Pentesting | Fiddler 💻, Sysinternals Suite 💻, dnSpy 💻, de4dot 💻, IDA Pro 💻, Process Explorer 💻, CFF Explorer 💻, OllyDbg 💻, x64dbg 💻, Ghidra 💻, Burp Suite Pro 💻, Wireshark 💻 |
| Network Pentesting | Nmap 🌐, Wireshark 🌐, Metasploit Framework 🌐, Nessus 🌐, OpenVAS 🌐, Responder 🌐, CrackMapExec 🌐, Netcat 🌐, Bettercap 🌐 |
| Active Directory Pentesting | BloodHound 🏢, Mimikatz 🔑, CrackMapExec 🏢, Impacket 📂, Kerbrute 🎭, Rubeus 🔓, LDAPDomainDump 📜, SharpHound 🕵️, PowerView 👀, ADRecon 📊 |
| Cloud Security | Prowler ☁️, ScoutSuite ☁️, CloudSploit ☁️, Pacu ☁️, Steampipe ☁️, CloudMapper ☁️, NCC Group Scout ☁️, kube-bench ☁️ |
| Container Security | Trivy 🐳, Aqua Microscanner 🐳, Clair 🐳, Anchore 🐳, Docker Bench 🐳, kube-hunter 🐳, Falco 🐳, Sysdig 🐳, Snyk 🐳 |
| Firewall Pentesting | hping3 🔥, NPing 🔥, Scapy 🔥, Zmap 🔥, firewalk 🔥, FTester 🔥, Nmap (Firewall Bypass) 🔥, Packet Sender 🔥, T50 🔥, ETTERCAP 🔥, TCPReplay 🔥 |
| WiFi Pentesting | Aircrack-ng 📶, Kismet 📶, Bettercap 📶, Reaver 📶, Fluxion 📶, Wireshark 📶, hcxtools 📶, Fern WiFi Cracker 📶, Evil Twin Attack Tools 📶, Wifiphisher 📶, Hashcat (WPA2 Cracking) 📶 |
| DevSecOps | GitHub Advanced Security 🔧, Trivy 🔧, Snyk 🔧, Anchore 🔧, OWASP Dependency-Check 🔧, jenkins🔧,Bandit 🔧, Checkmarx 🔧, Veracode 🔧, SonarQube 🔧, Dagda 🔧, Sysdig Secure 🔧, Cloud Custodian 🔧 |
| OSINT (Open-Source Intelligence) | theHarvester 🕵️, Maltego 🕵️, SpiderFoot 🕵️, Recon-ng 🕵️, Shodan 🕵️, FOCA 🕵️, Google Dorking 🕵️, OSINT Framework 🕵️, Metagoofil 🕵️, Amass 🕵️, GHunt 🕵️, Sherlock 🕵️, Social-Engineer Toolkit (SET) 🕵️, Sublist3r 🕵️, PhoneInfoga 🕵️, Creepy 🕵️ |
|
|
|