In-depth attack surface mapping and asset discovery

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

Fetch all the URLs that the Wayback Machine knows about for a domain

🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓

Take a list of domains and probe for working HTTP and HTTPS servers

Gospider - Fast web spider written in Go

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

Fetch many paths for many hosts - without killing the hosts

A tool to check a bunch of URLs that contain reflecting params.

A practical Telegram bot for getting bus etas in Singapore. Succeeded by https://github.com/yi-jiayu/bete