
Photon
Incredibly fast crawler designed for OSINT.

Incredibly fast crawler designed for OSINT.

AI-powered bug bounty hunting toolkit that works with or without subscription.

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

Find leaked secrets via github search

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

Bidirectional token-classification model for PII detection and masking in text, with CLI for redaction, evaluation, and finetuning on-premises.

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github,…

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Notes about attacking Jenkins servers

Useful Google Dorks for WebSecurity and Bug Bounty

A wrapper around grep, to help you grep for things


Tool for advanced mining for content on Github

OSINT reconnaissance tool for network discovery, subdomain enumeration, IP enrichment, and secret detection via certificate logs, Shodan, and GitHub…

Extract URLs, paths, secrets, and other interesting bits from JavaScript

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.