Mir Shan Talpur

bug-reaper. Web2 bug bounty Agent Skill — evidence-based, no AI slop. Covers 18 vulnerability classes across HackerOne, Bugcrowd, Intigriti, and YesWeHack.

keyana. High-performance JavaScript reconnaissance tool with Aho-Corasick pattern matching for bug bounty hunters and security researchers

AuthGen. AuthGen allows users to generate authentication keys of different durations (1-day, 3-days, 7-days, 30-days & more) through a graphical interface. It stores the keys and their expiry dates in a SQLite database, provides options to copy and delete keys, and displays information related to the author and accounts.

apivulnminer. APIVulnMiner: Advanced API vulnerability scanner for automated endpoint discovery & security testing. Features AI-driven discovery, OWASP Top 10 coverage, multi-format reports (JSON, HTML), async performance, and custom scan options.

Text-to-DB-Converter. create a database file first & convert your data that you have in your text file into a database file with these scripts

LockPickPDF. LockPickPDF is an easy-to-use tool for decrypting password-protected PDF files using a list of potential passwords. Its intuitive graphical interface allows you to select files or folders for batch processing, monitor progress, and view results. Powered by the qpdf library, it’s perfect for regaining access to locked PDF files.

GeoCipher. GeoCipher is a Python application that allows you to retrieve geographical information based on IP addresses and coordinates (latitude and longitude). This tool provides a user-friendly graphical interface using PyQt6, making it easy to use.

VillainC2. A modern, intuitive, and standalone web interface for the powerful Villain C2 framework. Manage sessions, generate payloads, and monitor activity with ease.