APIDetector APIDetector is a powerful and efficient tool designed for testing exposed Swagger endpoints in various subdomains...
Web Information Gathering
secator secator is a task and workflow runner used for security assessments. It supports dozens of well-known...
Arjun Arjun can find query parameters for URL endpoints. If you don’t get what that means, it’s...
Emora Emora allows you to search for accounts by username across social networks. Inspired by tools like Sherlock,...
OSTE-Meta-Scanner This project aims to simplify the field of Dynamic Application Security Testing. The OSTE meta scanner...
git-alerts: detect and monitor GitHub org users’ public repositories for secrets and sensitive files
git-alerts: detect and monitor GitHub org users’ public repositories for secrets and sensitive files
GitAlerts GitHub repositories created under any organization can be controlled by the GitHub administrators. However, any repository...
Troll-A Troll-A is a command line tool for extracting secrets such as passwords, API keys, and tokens...
domainim Domainim is a Blazing fast domain reconnaissance tool for bounty hunters written in Nim. Features Virtual...
LEAKEY LEAKEY is a tool for validation of leaked API tokens/keys found during pentesting and Red Team...
Porch Pirate Porch Pirate started as a tool to quickly uncover Postman secrets, and has slowly begun...
vhostawesome A tool designed to efficiently check for virtual hosts across multiple IP addresses. FunWithVhosts automates the...
MCPTool – Pentesting tool for Minecraft Features See information of a server. View player information. Get information...
GAP This is an evolution of the original getAllParams extension for Burp. Not only does it find...
XnlReveal This is a Chrome Extension that can do the following: Show an alert for any query parameters that...
xeol A scanner for end-of-life (EOL) packages in container images, filesystems, and SBOMs What is EOL software?...