Pinned

1. Jbin-website-secret-scraper Jbin-website-secret-scraper Public

   Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and many other juicy information.

   JavaScript 145 24

2. Parameter-Reflect-Finder Parameter-Reflect-Finder Public

   Parameter-Reflect-Finder is a python based tool that helps you find reflected parameters which can have potential XSS or Open redirection vulnerabilities.

   Python 14 7

3. SniffCon-Ultimate-Recon-Dashboard-For-Bug-Bounty-And-Pentesting SniffCon-Ultimate-Recon-Dashboard-For-Bug-Bounty-And-Pentesting Public archive

   Sniffcon has a wide list of powerful online bug bounty tools which can be used to find security vulnerabilities.

   35 9

4. Nuclei-and-Subfinder-API Nuclei-and-Subfinder-API Public

   Web API for nuclei and subfinder will help you automate your entire security testing workflow since you can host it anywhere and make it accessible.

   Go 57 11

5. BullDIR BullDIR Public

   BullDIR is a fast hidden directory/file scanner which scans for active and hidden directories in a target. The tool takes your given wordlist and exposes the valid directories or files.

   Go 7 2

6. secret-regex-list secret-regex-list Public

   List of regex for scraping secret API keys and juicy information.

   660 66