🔍 Customize your new tab with Hacker Search, a modern Chrome extension featuring a matrix-inspired design and powerful search widgets.

Community curated list of templates for the nuclei engine to find security vulnerabilities.

A powerful and flexible web crawler built with Node.js. This tool allows you to crawl websites, extract links, and filter results based on various criteria.

BeyondSub is a powerful subdomain enumeration tool that uses over 25 techniques to discover, analyze, and assess subdomains' security. Its modular design lets users customize scans for different purposes—ideal for security researchers, bug bounty hunters, and system administrators.

bookmark for javascript endpoint extractor

AI-Driven Recon & Bug Bounty Toolkit

FrogPost: postMessage Security Testing Tool

A simple browser extension to quickly find interesting security-related information on a webpage.

Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration testing, collected in one place. List types include xss, sqli, sensitive data patterns, fuzzing payloads, web shells, and many more.

Advanced Link Reconnaissance Extension For Firefox

ReconPro is a specialized Google dorking tool designed for cybersecurity professionals and bug bounty hunters.

JSpider is a smart crawler for hidden endpoints. It crawls and extracts hidden API endpoints and URLs from JavaScript files and HTML source code — all directly in your browser.

The "Hacksmith Shop" Vulnerable Web Application

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Social Network for hackers, pentesters, and bug hunters

⚡ JavaScript-aware crawler for security researchers and bug bounty hunters. Extract hidden endpoints and internal subdomains through static and semantic analysis of JS files. Lightweight. Fast. Sneaky.

Chrome extension to scrape Shodan host & domain pages and export IPs, ports, subdomains, and DNS records.

🐞 Understand how cross-site scripting occurs, how to detect and exploit XSS vulnerabilities, giving you control of other visitor's browsers.

A tool to extract all the urls and paths found in the content of a page (js sources included)