Tools for bug bounty

All-in-one OSINT for any website.

Next-generation web tech fingerprinter.

Advanced XSS detection suite.

Cyber-security all-in-one platform.

Auto-prepare APKs for HTTPS inspection.

Crawl domains for endpoints, secrets, API keys and tokens.

Fast recursive content discovery in Rust.

Fast web fuzzer written in Go.

Find leaked secrets via GitHub search.

Terminal HTTP intercepting proxy and web pentest toolkit.

Check which sites an email address is registered on

Fast HTTP toolkit.

Test and exploit JWT vulnerabilities.

Interactive HTTPS proxy.

Frida-based Android intent interception for security research

Red-team prompts, agents and RAGs.

AI pentest tool that re-runs every exploit to verify it.

Automated reconnaissance framework for web applications

Automated recon and web vulnerability-scanning framework.

Scan ServiceNow instances for unauthenticated data exposure

Automatic SQL injection and database takeover.

E-mail and subdomain harvester.

WAF fingerprinting.

Historical URLs from the Wayback Machine.