Sébastien Copin

postleaks. Search for sensitive data in Postman public library.

hfinder. Help recon of hostnames from specific ASN or CIDR, thanks to Robtex and BGP.HE

CVE-2022-35914-poc. Python

salsa. SALSA 💃⚡ - SALesforce Scanner for Aura (and beyond). Enumeration of vulnerabilities and misconfigurations against Salesforce endpoint.

njsdump. Dump paths & pages from Next.js Manifest

sonarleaks. Digging into private data through Sonarcloud public projects

subscout. All-in-one subdomains scout tool Docker image

DefaultCreds-cheat-sheet. One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

magtek-card-reader. Read Triple-track Magnetic Stripe Card from Magtek Swipe Card Reader

badsecrets. A library for detecting known secrets across many web frameworks

related-domains. Find related domains of a given domain.

puncia. The Panthera(P.)uncia of Cybersecurity - Subdomain & Exploit Hunter powered by AI

horusec-platform. Fork of ZupIT/horusec-platform

sret. Salesforce Recon and Exploitation Toolkit

jappalyzer. A Java implementation of the Wappalyzer.

ApacheTomcatScanner. A python script to scan for Apache Tomcat server vulnerabilities.

graphql-introspection-converter. Simple converter for GraphQL introspection JSON to schema

sessionless. SignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens

hacktricks-cloud. Python

badPods. A collection of manifests that will create pods with elevated privileges.

wappalyzer. HTTP Archive fork of Wappalyzer

netscan. Network scanner

tapestry4-examples-docker. Working Apache Tapestry 4 examples on Apache Tomcat embedded in Docker image