AmirhosseinBidokhti

assetWatcher

A tool to notify you of the latest changes in bug bounty programs.

scopeNotifier

Getting the latest scopes (domains that are eligible for bug bounty reports) of top bug bounty platforms such as H1, Bugcrowd, and more

domain-discovery-recon-examples

Discovering the domain of the following companies (cafebazaar.ir, snapp.ir, Sony, Walmart)

cdnexcluder

With this tool you can spot the CDN IPs and exclude them from your target list.

urlUniquifier

Detach duplicate URLs from provided input/file

writeupNotifier

Gathering the latest infosec writeups

cors-misconfig-exploits

csrf-exploits

Handy CSRF exploits based on the HTTP request.

h1reports

A crawler for most recent disclosed reports on Hackerone.

HolyTips

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

parse-nmap-result

postMessage-demo

twitterMassFollow

If you are lazy to manually follow a big list of accounts on twitter, use this tool.

e-commerce-untill-redux-thunk-container-pattern

hoo-club-react

paramaker

A handy tool to generate parameters and values to append to a given url

abusing-reverse-proxies

burpCertificate

System-level trusted BurpSuite Certificate for Android 7+

chromePlatformSwitcher

Simple chrome extension to spoof and switch your "navigator.platform" to trick some PWAs which restricts access from none mobile devices.

from-callbacks-to-async-await

Learn behind the scenes of async JS with examples that get refactored all the way from callbacks to promises and the most beautiful way to consume them (the async await)

gym-management-app

pidcat

Colored logcat script which only shows log entries for a specific application package.

Sass-7-1

Sample UI project written with 7-1 Sass and BEM architectures in mind.