Search-for-all-leaked-keys-secrets-using-one-regex-. Search for all leaked keys/secrets using one regex! bugbounty
241lu3ky13-SCANNER. tools to find xss in a website
58Authorization-Nuclei-Templates. Authorization-Nuclei-Templates
39Unauthorized-Access-to-Metadata-and-User-Data-like-CTF. Unauthorized Access to Metadata and User Data like CTF
28Bypass-Reset-Password-Code-Lead-to-Account-Takeover. Bypass Reset Password Code Lead to Account Takeover
26script-python-to-check-url-list-via-cookies-and-Authorization. script python to check url list via cookies and Authorization
19Laravel-Livewire-Remote-Code-Execution-RCE-via-APP_KEY-Leakage. Python
8brute-force-directory-work-with-multithreading. brute force directory work woth multithreading
6virustotalx-updated. Fast & safe VirusTotal domain scanner with API-key rotation, null-safe parsing, and file support.
5Laragon-License-Validation-Bypass. We found this issue using https://obsidianlabs.cloud/dashboard. and we submit to Laragon
4gRPC-Web-Burp-Repeater. A powerful Burp Suite extension for **penetration testers** and **bug bounty hunters** to intercept, decode, edit, and replay **gRPC-Web** traffic.
4swagger-XSS. swagger-XSS
3url-extractor. url-extractor
1-DNS-. ئایا دەزانی هێرشیDNSچییە
1Facebook-Credential-Phishing-Campaign-Delivered-via-Gmail-Infrastructure. Analysis of a phishing campaign abusing Google AppSheet and Telegram bots
1