Category

HTTP 403 bypass tool for penetration testers and bug bounty hunters, allowing for web application security audits.

A Bash script for automating domain reconnaissance and XSS vulnerability detection.

A semi-automated tool for exploiting vulnerabilities in Spring Boot applications.

RCEFuzzer is a passive scanning tool focused on fuzzing to detect unknown vulnerabilities.

A curated list of search engines useful for penetration testing, vulnerability assessments, and bug bounty hunting.

A fully automated, aggressive URL discovery and vulnerability scanning script for Bug Bounty & Penetration Testing.

JShunter is a command-line tool for analyzing JavaScript files and extracting sensitive data and endpoints.

SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty.

A collection of short, high-impact hacking and bug bounty tips for security researchers and pentesters.

An automated GitHub Actions-based crawler that fetches and updates public scopes from popular bug bounty platforms.

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services.

Aether is a revolutionary XSS toolkit for modern pentesting and bug bounty hunting.