A passive way to find backups/ sensitive information.

A fully automated, reliable, super-fast, mass scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.

Useful "Match and Replace" burpsuite rules

403/401 Bypass Methods + Bash Automation + Your Support ;)

Match and Replace script used to automatically generate JSON option file to BurpSuite

Potentially dangerous files

All about bug bounty (bypasses, payloads, and etc)

SpideyX a multipurpose Web Penetration Testing tool with asynchronous concurrent performance with multiple mode and configurations.

Finding XSS during recon

Start your journey with Bug Bounty.

JS Finding can be used to extract JavaScript (JS) files from either a single domain URL or a list of domains. The tool supports various extraction methods and provides additional options for file d…

Subdosec is a fast, accurate subdomain takeover scanner with no false positives. It also offers a database of sites vulnerable to subdomain takeover (public results), along with detailed metadata l…

A modern tool written in Python that automates your xss findings.

This tool allows you to find ssti vulnerability with ease!

Automates Arjun and speed up parameter bruteforcing

A modern tool written in Python that automates your xss findings.

A Powerful Sensor Tool to discover login panels, and POST Form SQLi Scanning

The CRLF Injection Scanner script is a Python-based tool designed to identify potential vulnerabilities in web applications related to Carriage Return Line Feed (CRLF) Injection. CRLF injection can…

An insane list of all dorks taken from everywhere from various different sources.

This SQL Injection Detection Tool is a Python-based script that scans web applications for potential SQL injection vulnerabilities. It achieves this by sending various payloads to the target URL an…

A powerful and multithreaded **Local File Inclusion (LFI)** scanner designed to detect vulnerabilities in web applications. This tool tests target URLs using user-provided payloads and identifies v…

Auto Recon tool for finding SQLi,XSS,LFi,OpenRedirect

A fast tool to scan CRLF vulnerability written in Go

This script Crawl the website and find the urls that contains html forms.

Host Header Injection Checker