🌐 Monitor domain expiration dates and receive timely alerts through Email, Telegram, Discord, and Slack to safeguard your online assets.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

XSS, SQLI, LFI, RCE Practice Labs in php

Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration testing, collected in one place. List types include xss, sqli, sensitive data patterns, fuzzing payloads, web shells, and many more.

Lab local sederhana untuk melakukan penetrasi testing secara manual dan legal serta berfokus pada kerentanan LFI (Local File Inclusion)

Telegram Cloud Bot is an open-source Telegram bot built with Laravel and React that lets you upload, organize, and share files or send messages directly from Telegram. It’s designed for seamless file management, easy setup, and supports contributions from developers of all skill levels.

TeleStrike is a red team utility designed for adversary simulation and security auditing of Telegram accounts. Built for educational and authorized assessment purposes, it mimics real-world attack vectors to test resilience and response mechanisms in Telegram’s authentication layers.

Educational tool for simulating Instagram login and 2FA mechanisms. Designed for ethical hacking and cybersecurity training.

A curated repository of categorized payloads for testing and exploiting common web vulnerabilities in ethical hacking and penetration testing.

This is my personal repo, which includes bug bounty tips, a collection of tools, one-liners, and other resources I personally prefer while hunting. It is still under development, so feel free to contribute.

🌌 BugBounty Hub: Your one-stop destination for Bug Bounty excellence! Explore Nuclei Templates and BugBounty Worldlists for comprehensive security testing. Join the fight for internet security today! (used in reconWTF)

Twitter vulnerable snippets

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

Code for exploiting phar vulnerability for educational purpose for my Medium blog

This project is a vulnerable web application to practice on. It is designed for educational purposes to help security enthusiasts and developers understand and mitigate common web vulnerabilities.

♾️ Bruteforce Scanner [v1-API] By AGC007™ -- PHP

finds hidden parameters

Find AWS S3 buckets and test their permissions.

Extract endpoints from source files.