Stars
WebRecon Pro is an advanced Open Source Intelligence (OSINT) web reconnaissance tool designed for cybersecurity professionals, penetration testers, and security researchers. It automates the proces…
Extract JavaScript source trees from Sourcemap files
WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via [email protected]
🔱 Powerfull XSS Scanning and Parameter analysis tool&gem
Auth Mutator is a Burp Suite extension that helps you experiment with mutated authentication requests while keeping the original traffic intact. It applies user-defined replace rules, removes authe…
Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not
"Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.
Now, the Host is Mine! - Super Fast Sub-domain Takeover Detection!
"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.
AI-powered workflow automation and AI Agents platform for AppSec, Fuzzing & Offensive Security. Automate vulnerability discovery with intelligent fuzzing, AI-driven analysis, and a marketplace of s…
Source repository for smart contracts used by Circle's stablecoins on EVM-compatible blockchains
SmartBugs: A Framework to Analyze Ethereum Smart Contracts
An enterprise friendly way of detecting and preventing secrets in code.
💧 Find sensitive information for a git repo
Identify hardcoded secrets in static structured text
a security scanner for custom LLM applications
Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, col…
Latest Burpsuite Professional Version 2025.x.x
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to co…
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
UI component for Globe Data Visualization using ThreeJS/WebGL
[Support 0.49.x](Reset Cursor AI MachineID & Bypass Higher Token Limit) Cursor Ai ,自动重置机器ID , 免费升级使用Pro功能: You've reached your trial request limit. / Too many free trial accounts used on this machi…
Light Blue React Template - Admin Dashboard Template built with React