Apache Tomcat - Open Redirect

WordPress Page Builder KingComposer <=2.9.6 - Open Redirect

BLHawk - Dead links aren't always dead!

SOUND4 Impact/Pulse/First/Eco <=2.x - Information Disclosure

Domain Grabber — A Python CLI tool to fetch unique root domains from Archive.org CDX API based on given domain extensions (e.g., .id, .co.id, .ac.id). Supports multiple extensions, progress tracking, retry with User-Agent rotation, and automatic result saving. Ideal for OSINT, domain research, and penetration testing reconnaissance.

SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting

Config files for my GitHub profile.

CGI Print ENV leaking

A tool for create encoded payloads and test them on targets

EventON (Free < 2.2.8, Premium < 4.5.5) - Information Disclosure

WEBFANG, is my first CLI, a modular OSINT & Reconnaissance toolkit curated for Ethical Hackers and Red-Teamers. Sink fangs into web targets using a passive intel gathering approach, active Spidering, DNS/WHOIS lookups & Shodan, All in a lightweight package. Choose your weapon & happy hunting.

DorkScan is a web app that helps bug bounty hunters and students generate Google Dork queries. Choose a role to get tailored dorks for vulnerabilities or educational resources. The tool allows custom searches, displaying clickable dorks in real-time with a clean, responsive design for easy use across devices.

Oracle WebLogic Server (LFI)

Microsoft Windows 'HTTP.sys' - Remote Code Execution

LearnDash LMS < 4.10.3 - Sensitive Information Exposure

phpMyAdmin <4.9.0 - Cross-Site Request Forgery

Joomla! Core SQL Injection

🔒 SecurEye: Web Security Simplified SecurEye helps you keep your website safe with log analysis and IP/port scanning. Get protected now on GitHub!

Appspec YML and YAML leaks