Blogs

SecretFinder is a python script to discover sensitive data like api keys, access token, authorizations, jwt,..etc in JavaScript(JS) files. It verifies the files with large regular expression.

Insider tool is secure code reviewer, which exclusively focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code.

Security Tool For Reconnaissance And Information Gathering On A Website

This tool can scan websites with open .git repositories for Bug Hunting...

RVuln:-- A multi-threaded-vulnerability-scanner written in Rust. Automated #Web Vulnerability Scanner.

Final Recon follows a modular structure so in future new modules can be added with ease.

Shcheck detects which security headers are enabled on certain websites. It just check headers and print a report about which are enabled and which not.

W9scan is an excellent Plug-in type web vulnerability scanner that scan the code with the 1200+ built-in plugins...

Dex2Jar is an instrument whose primary point is to convert .dex files into jar and smali files. The Dex2jar is mainly used for reverse engineering Android applications.

Corsy is a lightweight program that scans for all known misconfigurations in CORS implementations.

RapidScan is a python based scanning tool used for analyzing vulnerabilities ...

Tulpar is an open source penetration testing tool that can find web application vulnerabilities.

A python script designed to check if the website is vulnerable of clickjacking and creates a poc. 

A toolkit for testing, tweaking and cracking

Tool used to scan ports , Brute force protocol Service

It performs XSS, SQL Injection, Crawling, Hash Type finding

CMS Detection and Exploitation suite - Scan WordPress, Joomla

GraphQL is a query language for APIs and a runtime for fulfilling those queries

Vulmap Online Local Vulnerability Scanners Project

Raccoon is a tool made for reconnaissance and information gathering with an emphasis on simplicity

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect