[mirror] This is a linter for Go source code. (deprecated)

.NET Deserialization Passive Scanner

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Find, verify, and analyze leaked credentials

pull decrypted ipa from jailbreak device

Find secrets with Gitleaks 🔑

Fetch many paths for many hosts - without killing the hosts

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

A tool geared towards pentesting APIs using OpenAPI definitions.

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

Bitbucket API library for Golang.

On-device signing utility for iOS

Potentially dangerous files

Automatically extracts API Keys from APK files

Checks a list of firebaseio to confirm they are working and have dev access to them

A python script that finds endpoints in JavaScript files

OWASP WEB Directory Scanner

Some files for bruteforcing certain things.

Wheres My Git - Find /.git/config files based on dirs found in home url

In-depth attack surface mapping and asset discovery

Fast web fuzzer written in Go