DorkScan is a web app that helps bug bounty hunters and students generate Google Dork queries. Choose a role to get tailored dorks for vulnerabilities or educational resources. The tool allows custom searches, displaying clickable dorks in real-time with a clean, responsive design for easy use across devices.

Gain the edge in hidden subdomain discovery with Subtracker.

This is a tool used by several security researchers to find Open Redirect Bug

WordPress Page Builder KingComposer <=2.9.6 - Open Redirect

My private bug bounty scripts i have written under the years for real time projects within bug bounty hunting and penetration testing(red team).

SOUND4 Impact/Pulse/First/Eco <=2.x - Information Disclosure

Domain Grabber — A Python CLI tool to fetch unique root domains from Archive.org CDX API based on given domain extensions (e.g., .id, .co.id, .ac.id). Supports multiple extensions, progress tracking, retry with User-Agent rotation, and automatic result saving. Ideal for OSINT, domain research, and penetration testing reconnaissance.

🔍 Advanced parameter discovery tool for web security testing. Extract parameters from web apps with HTTP/2 support, headless browser, and intelligent filtering. Built for bug bounty hunters.

BLHawk - Dead links aren't always dead!

SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting

Microsoft FrontPage Extensions Check (shtml.dll)

Config files for my GitHub profile.

Oracle WebLogic Server (LFI)

Microsoft Windows 'HTTP.sys' - Remote Code Execution

Explore a collection of my insightful Medium writeups covering a variety of topics.

LearnDash LMS < 4.10.3 - Sensitive Information Exposure

A browser extension that helps bug bounty hunters rewrite and improve their communications with ai.

Joomla! Core SQL Injection

CGI Print ENV leaking