mr_ofcodyx

gxsuid. gxsuid is a powerful tool for interacting with Instagram profiles. It offers comprehensive functionalities such as searching by user ID or username, viewing and updating data in a SQLite database, extracting profile information from Instagram, manipulating images, real-time monitoring, and recording logs.

noxdroid. Android Pentest Framework

sporTracker. SporTracker is an OSINT tool designed to collect and organize publicly available information from multiple online sources. It helps investigators and researchers track digital footprints, analyze connections, and gather intelligence from open data quickly and efficiently. 🔎🌐

instaSINT. Instagram User Searcher (Osint) 🔍

Git-eXposed. Git-eXposed is a tool designed to detect and extract sensitive information from exposed Git repositories

alfred. Alfred is a advanced OSINT information gathering tool that finds social media accounts based on inputs.

Alopra. Utilizando o poder da tecnologia AlienVaultOTX, a Alopra pode extrair URLs de maneira rápida.🔥

secretscanner. Browser extension to detect exposed credentials, API keys, and tokens on websites for security research and OSINT.

frida-script. Coleção de scripts Frida para bypass de proteções em aplicativos Android, desenvolvida para testes de segurança e análise de aplicações.

TTWAF. 「🧱」Test a list of payloads and see if you can bypass it

mrofcodyx.

SwaggerSpy. Automated OSINT on SwaggerHub

wsdldump. dump urls at endpoint wsdl

wadldump. dump urls at endpoint wadl

pipelines-tricks. Pipelines | bugbounty | hacking | redteaming | blueteaming | soc | noc | tricks

InstaX. InstaX is an advanced Open Source Intelligence (OSINT) tool leveraging artificial intelligence to enhance intelligence-gathering capabilities on Instagram. It offers powerful features to extract and analyze data from Instagram, providing valuable insights and intelligence.

Androfiles. Python

Recon_Methodology. Advance and Easy recon methodology

jsluice. Extract URLs, paths, secrets, and other interesting bits from JavaScript

LEAKEY. LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and easy to add checks for new services.

ApiScan. Este script é uma ferramenta em Python projetada para automatizar a avaliação de segurança de APIs. Ele utiliza a especificação OpenAPI para extrair rotas, métodos e parâmetros da API a serem testados

reconx. ReconX — Lightweight Python CLI for OSINT & network reconnaissance (subdomains, nmap, whois, clickjacking PoC, headers, geolocation)

Web_Hacking. Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

SSLPinDetect. SSLPinDetect is a tool for analyzing Android APKs to detect SSL pinning implementations by scanning for known patterns in decompiled code. It helps security researchers and penetration testers identify SSL pinning mechanisms used in mobile applications.

spaceinvaders. Automation with SSH for Hacking

XSS-Payload. 「💉」XSS Payload List

seekr. A multi-purpose OSINT toolkit with a neat web-interface.

Pen-Andro. Script to Automate installtion of Apps ,frida server and moving Burpsuite certificate to root folder

WifiPassword. Shell

Venera. A active testinting framework