SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

My Tools For Bug Bounty

Hacking tools

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

List of useful OSINT tools for information gathering. Especially for pentesters 🖖

BugBountyTips

The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, subdomain monitoring, alerts via Discord, Slack and Telegram, …

Get related domains / subdomains by looking at Google Analytics IDs

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.