randomrobbiebf/super-secret-finderAutomated secret matching plugin for Burp Suite that detects exposed API keys, tokens, and credentials in HTTP requests and responses for security…
nccgroup/web3-decoderBurp Suite extension for decoding Web3 JSON-RPC traffic, including smart contract function calls, responses, and ABI resolution with proxy-aware and…
reverseclabs/azuredevops-enumRead-only Azure DevOps enumeration tool that queries the REST API to surface projects, repositories, service connections, builds, pipeline secrets,…
michaeladamgroberman/cve-2026-32646CVE-2026-32646 disclosure detailing missing authentication on Gardyn Home Kit administrative device management API endpoint, enabling unauthenticated…
michaeladamgroberman/cve-2026-25197Detailed disclosure of CVE-2026-25197: Authorization bypass via IDOR in Gardyn Home Kit cloud API, exposing PII and camera images of 134K+ users…
h1thub/cve-2024-46635Proof-of-concept for CVE-2024-46635: an improper input validation vulnerability in GongZhiDao System's API endpoint that exposes sensitive user…
secsys-fdu/cve-2025-51869Demonstrates an Insecure Direct Object Reference (IDOR) vulnerability in Liner's chat component, allowing attackers to tamper with other users'…
ex-cal1bur/cve-2026-44595Proof-of-concept exploit for CVE-2026-44595 demonstrating unauthorized user enumeration via missing authorization checks in YAMCS IAM API endpoints.
aman-parmar/cve-2025-54554Advisory detailing an unauthenticated REST API information disclosure vulnerability in tiaudit, including impact, attack vector, and vendor fix…
at0mxploit/cve-2025-59843-cve-2025-59932CVE on FlagForge on versions 2.0.0 to 2.3.0. Upgrade to version 2.3.1 to fix the issue.
momenbasel/keyfinderPassive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
ffuf/ffufHigh-performance web fuzzer for content discovery, virtual host enumeration, and parameter fuzzing. Supports recursive scanning, multi-wordlist…
beyarz/cve-apiSelf-hosted API to parse, filter, and query the latest CVEs from cve.mitre.org by keyword and year, enabling real-time vulnerability intelligence.
epi052/feroxbusterA fast, simple, recursive content discovery tool written in Rust.
censys/censys-pythonAn easy-to-use and lightweight API wrapper for Censys APIs.
dolevf/graphw00fGraphQL server engine fingerprinting tool that sends benign and malformed queries to identify backend technology and assess security defenses via the…
watchdogsecurity/porch-pirateAutomated OSINT and reconnaissance framework for Postman that discovers API endpoints, secrets, and sensitive data across workspaces, collections,…
liodeus/swaggerholeA python3 script searching for secret on swaggerhub
