Pinned Loading

1. nextrecon nextrecon Public

   Next.js & JS Bundle Recon Tool — secrets, env vars, API endpoints, routes. For bug hunters.

   Python 2

2. CobraAudit CobraAudit Public

   Bug bounty audit framework — API key validation, OAuth misconfiguration testing, password reset auditing

   Python 3

3. subvenom subvenom Public

   Subdomain & Tech Stack Intelligence — multi-source, zero false positives

   Python 1

4. metavenom metavenom Public

   Image EXIF metadata extractor - from devive to geolocation

   Python 1

5. ghost-drop-android ghost-drop-android Public

   Burn-after-read encrypted message sharing — Android app

   Java 2

6. whonum whonum Public

   Phone number OSINT — number intelligence, caller ID, SIM farm detection

   Python 1