Bug Bounty Security Tools

This Python script can be used to bypass IP source restrictions using HTTP headers.

A powerful SOCKS5 proxy based network traffic interception tool for Windows that enables TLS/SSL inspection, analysis, and manipulation at the network level.

A Workflow Engine for Offensive Security

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep

Tool to scan for secret files on HTTP servers

ChopChop is a CLI to help developers scanning endpoints and identifying exposition of sensitive services/files/folders.

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

The recursive internet scanner for hackers. 🧡

Knock Subdomain Scan

Small tool to Grab subdomains using Shodan api.

Scrape domain names from SSL certificates of arbitrary hosts

This project delivers a fully automated **Recon-as-Code** workflow for passive reconnaissance for web application environments. It combines GitHub Actions-based CI/CD automation, powerful recon tools, and a Flask-powered dashboard for visualized and authenticated access to the findings.

S3BucketMisconf is an advanced tool designed to scan AWS S3 buckets for misconfigurations. It identifies publicly accessible buckets, checks permissions, and detects sensitive data leaks. Ideal for bug bounty hunters and pentesters, it automates the recon process and enhances cloud storage security assessment efficiently.

Discover new target domains using Content Security Policy

Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

403/401 Bypass Methods + Bash Automation + Your Support ;)

This tool will check for Sensitive Data Leakage with some useful patterns/RegEx. The patterns are mostly targeted on waybackdata and filter everything accordingly.

Master script for web reconnaissance

crawls the website and finds broken social media links that can be hijacked

Automate your hacking

jxscout superpowers JavaScript analysis for security researchers

An MCP server implementation

bash script for Subdomain Enumeration

declutters url lists for crawling/pentesting