-
medium-writeups Public
This repository updates latest Bug Bounty medium writeups every 10 minutes, https://readmedium.com/Medium_URL, https://archive.ph/Medium_URL, https://freedium.cfd/Medium_URL
-
resolvers Public
List of Fresh DNS resolvers updates every 1 hour
-
shortscan Public
Forked from bitquark/shortscanAn IIS short filename enumeration tool
Go MIT License UpdatedDec 16, 2025 -
cvemapping Public
This repo Gathers all available cve exploits from github.
⚠️ Be careful Malware. -
scope Public
An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms (like Hackerone/Bugcrowd/Intigriti/etc) (updates every 10 minutes)
-
stravac Public
List of all strava challenges, (updates every 6 hours).
-
wordpress-plugins Public
Scrape all wordpress plugins (updates every 6 hour)
-
emailautomation Public
A powerful Go-based tool for automating bug bounty report emails. This tool processes markdown files, extracts target domains, finds email addresses, and sends beautifully formatted HTML emails to …
Go UpdatedDec 16, 2025 -
linkinspector Public
linkinspector is a fast command-line tool for inspecting URLs and retrieving HTTP status codes, content lengths, and content types. It supports filtering and matching responses, and can process URL…
-
targets-filter Public
Converting trickest and chaos bbp targets in json, updates every 12 hour
-
redirectfinder Public
A fast and efficient Open Redirect vulnerability scanner written in Go. This tool automates the process of testing URLs for open redirect vulnerabilities by replacing parameter values with redirect…
-
WordList Public
Custom wordlist, updated regularly
-
urldedupe Public
Forked from ameenmaali/urldedupePass in a list of URLs with query strings, get back a unique list of URLs and query string combinations
C++ MIT License UpdatedDec 15, 2025 -
CVE-2025-55182 Public
A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components.
-
react2shell-scanner Public
Forked from assetnote/react2shell-scannerHigh Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)
Python UpdatedDec 13, 2025 -
ipfinder Public
IP Finder tool, ipfinder collects IP addresses from Shodan search queries.
-
gungnir Public
Forked from g0ldencybersec/gungnirCT Log Scanner
-
portmap Public
portmap is a fast portscan tool, uses shodan public data for port scan used internetdb.shodan.io and api.shodan.io/shodan/host
-
favinfo Public
favinfo scrapes favicon in HTML code and many other different ways.
-
BugBountyData Public
List of Public Bug Bounty and Responsible Disclosure Programs
-
sftpsender Public
A lightweight CLI tool for uploading and downloading files/directories to/from remote servers using SFTP over SSH.
Go UpdatedDec 10, 2025 -
goswagger Public
A fast and efficient tool to detect Swagger UI endpoints on web servers. This tool automates the process of testing URLs with wordlist paths to find exposed Swagger UI documentation, which can reve…
-
GarudRecon Public
GarudRecon automates domain recon with top open-source tools to discover assets, enumerate subdomains, and detect XSS, SQLi, LFI, RCE & more.
-
jsmanager Public
A high-performance Go tool for discovering and extracting JavaScript files from domains. JSManager aggregates results from multiple reconnaissance tools and verifies JavaScript URLs in parallel.
-
dotgitfinder Public
A fast and efficient tool to detect exposed `.git/config` files on web servers. This tool automates the process of testing URLs for exposed Git configuration files, which can reveal sensitive infor…
-
sqlifinder Public
A fast and efficient SQL Injection vulnerability scanner written in Go. This tool automates the process of testing URLs for SQL injection vulnerabilities by replacing parameter values with payloads…
-
lfifinder Public
A fast and efficient Local File Inclusion (LFI) vulnerability scanner written in Go. This tool automates the process of testing URLs for LFI vulnerabilities by replacing parameter values with paylo…
-
Interlace Public
Forked from codingo/InterlaceEasily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
Python GNU General Public License v3.0 UpdatedDec 7, 2025 -
-
originiphunter Public
A powerful Go tool for finding origin IPs of domains by querying multiple security APIs and validating results with built-in HTTP client.
{{ message }}