iamRjarpan

driftwood

Private key usage verification

DataExtractor

A Burp Suite extension to extract datas from source code while browsing.

salmonella

Wrecking sandwich traders for fun and profit

ffuf-scripts

Scripts to help with different ffuf tasks and workflows

waydroid

Waydroid uses a container-based approach to boot a full Android system on a regular GNU/Linux system like Ubuntu.

meilisearch

A lightning-fast search API that fits effortlessly into your apps, websites, and workflow

urlhunter

a recon tool that allows searching on URLs that are exposed via shortener services

progress-burp

Burp Suite extension to track vulnerability assessment progress

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

Nuclei-Templates

regextokens

list of regex patterns for oauth / api tokens with provided source

BurpSuiteAutoRepeaterNaming

This extension replaces the default repeater tab name with the URL path of the repeater request.

samlists

Free, libre, effective, and data-driven wordlists for all!

jsmon

a javascript change monitoring tool for bugbounties

wilson-cloud-respwnder

WILSON Cloud Respwnder is a Web Interaction Logger Sending Out Notifications with the ability to serve custom content in order to appropriately respond to client-issued requests.

bbrf-dashboard

dump

Stuff that doesn't deserves its own repository.

security-research

This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

pagodo

pagodo (Passive Google Dork) - Automate Google Hacking Database scraping and searching

BigBountyRecon

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation.

secretz

secretz, minimizing the large attack surface of Travis CI

GitDorker

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

github-dorks

Find leaked secrets via github search

unwebpack-sourcemap

Extract uncompiled, uncompressed SPA code from Webpack source maps.

ds_store_exp

A .DS_Store file disclosure exploit. It parses .DS_Store file and downloads files recursively.

api_wordlist

A wordlist of API names for web application assessments

inql

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

burp-scope-monitor

Burp Suite Extension to monitor new scope

gotator

Gotator is a tool to generate DNS wordlists through permutations.

can-i-take-over-dns

"Can I take over DNS?" — a list of DNS providers and how to claim (sub)domains via missing hosted zones