Scanning APK file for URIs, endpoints & secrets.

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Knock Subdomain Scan

Find leaked secrets via github search

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

Powerful framework for rogue access point attack.

BBT - Bug Bounty Tools (examples💡)

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

Making Favicon.ico based Recon Great again !

Heuristic Vulnerable Parameter Scanner

🌌️Fuzz4All: Universal Fuzzing with Large Language Models

A subdomain fuzzing tool