phor3nsic

favicon_hash_shodan

Calculate Favicon Hash for Shodan

shodan_filters

reflectparams

slackexplorer

vhospping

Vhost Hopping Or Abuse Proxy Pass

bucketaccfiles

CVE-2021-40822

kxss

This a adaption of tomnomnom's kxss tool with a different output format

subdominex

apkdeepleak

Scanning APK file for URls, endpoints & secrets.

bruteSu

destiny

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

rayder

A lightweight tool for orchestrating and organizing your bug hunting recon / pentesting command-line workflows

cleanJS

bc2telegram

Simple script to report Burp Collaborator interactions to Telegram bot chat

CredKing

Password spraying using AWS Lambda for IP rotation

degoogle

search Google and extract results directly. skip all the click-through links and other sketchiness

frouter

git-hound

Reconnaissance tool for GitHub code search. Finds exposed API keys using pattern matching, commit history searching, and a unique result scoring system.

log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

phor3nsic

poc

SecretFinder

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

smuggler

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

sslbum

test

weakpass

Basic script that automates the generation of weak and standardized passwords

wordetect

writeups