austinjump-sec/api-spy-api-probeA powerful directory brute-force tool that's tailored for recursive/multiplex operations, API discovery and enumeration, JS file scraping, and lists…
ankhcorp/gitgrabThis tool is designed to interact with the GitHub API and retrieve specific user details, repository information, and commit emails for a given user.
amorath/threatscraperPython tool that queries the VirusTotal API to check file hashes against 70+ antivirus engines, schedules recurring scans, and exports detection…
rynosec/leakeyValidates leaked API tokens and keys using customizable JSON-based signature checks. Designed for pentesters and bug hunters to determine the impact…
brinhosa/apidetectorMulti-threaded scanner for detecting exposed Swagger/OpenAPI endpoints across web domains and subdomains, with automatic XSS detection, PoC…
pikpikcu/aireconAIRecon is an autonomous cybersecurity agent that combines a self-hosted Large Language Model (Ollama) with a Kali Linux Docker sandbox and a Textual…
ebrasha/abdal-cve-2026-63030Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and…
byt3hx/jsleakConcurrent CLI tool for discovering secrets, API keys, and links in JavaScript files during web reconnaissance, with custom regex pattern support and…
undeadsec/swaggerspyAutomated OSINT tool that scans SwaggerHub API documentation to discover exposed secrets, credentials, and sensitive information using regex-based…
hueristiq/xsubfind3rPassive subdomain discovery tool that aggregates results from multiple online sources via CLI, supporting stdin/stdout, JSONL output, and API key…
elvonferen/osintonOsinton Its an open-source project running using SERP API and ollama mistral
sohelyousef/js-secret-hunterAutomated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files.
s0md3v/photonIncredibly fast crawler designed for OSINT.
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
projectdiscovery/naabuA fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface…
rhinosecuritylabs/pacuThe AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
tamim1089/hikvisionexploiterHikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras…
dragonked2/egyscanEgyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious…
