Publications

Findings

JS Review Led to Graphql Abuse wined 10xBAC

JS Review Led to Graphql Abuse wined 10xBAC

Exploiting of Vulnerabile GRAPHQL Endpoints

Know More!
Easy admin Access By Gaming with JSON

Easy admin Access By Gaming with JSON

Exploiting of Mass Assignment Vulnerable API

Know More!
How Hidden 3xXSS got revealed in 5 Min

How Hidden 3xXSS got revealed in 5 Min

Exploiting of Simle Reflected XSS Resulted from Parameter Fuzzing

Know More!

Videos

Open Source Projects

PentesterOPS

PentesterOPS

A comprehensive penetration testing operations dashboard for managing projects, tasks, findings, clients, and assets. Built with Next.js, Express, and MongoDB.

Explore it!
SEMGREP10K

SEMGREP10K

10,014 unique Semgrep security rules aggregated from 145 open-source repos across 35 languages

Explore it!
Awesome NMAP

Awesome NMAP

A curated knowledge base of Nmap NSE scripts, CVE intelligence tools, and automated reconnaissance pipelines for security professionals.

Explore it!
GoPhish Remastred

GoPhish Remastred

GoPhishv2 is Enterprise-grade, open-source phishing simulation & security-awareness platform

Explore it!
VPN Console

VPN Console

Unified internal VPN console: OpenVPN profile library, Tailscale admin, host control

Explore it!
UUMAP

UUMAP

UpMap / UpGen / Upname three-tool file-upload arsenal sharing a 590+ known-paths registry. Live scanner ,offline payload generator , filename wordlist generator.

Explore it!