Bug Libraries

Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their …

A heavily armed customizable phishing tool for educational purpose only. It contains phishing email templates of mostly used social media platforms. I have made 3 youtube videos, they delete it, so i…

Or, open a file and insert the following. Now, go back to the requester file and highlight all 5 lines, and once again execute the requests. Nice, huh? Try it out. Requester combines features from ap…

Bypass 4xx HTTP response status codes and more. Based on PycURL and Python Requests. Script uses multithreading and is based on brute forcing, and as such, might have false positive results. Script h…

Jira-Lens 🔍 is a Python Based vulnerability Scanner for JIRA. Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management. This tool Perf…

Current Release: v0.1.0 (2020.11.08) Scan single clearweb site Scan single onion site Fast batch scan with custom User-Agent License: GNU General Public License, version 2

On Ubuntu, you can install most of the dependencies with the following command: Clone the source code to any folder you prefer and initialize the submodules: Now run the following commands to build i…

The purpouse of this tool is helping bug hunters and pentesters during reconnaissance It can be used in any system with python3 You can easily install AORT using pip: If you want to install it from s…

Pycript is a Burp Suite extension that enables users to encrypt and decrypt requests and response for manual and automated application penetration testing. It also allows users to create custom encry…

Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains (removing the necessity for prior database management). Moreover, it boasts…

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them. It collects both URLs and JS links to scrape secrets out of it. Also if you are looking for a …

*** 03-05-2024 *** NEWS: Imagine that... In less than 28 seconds, it can discover 15464 subdomains. ********** AVAILABLE SOON ********** Tugarecon is a python tool designed to enumerate subdomains us…

N.Y.A.W.C is a Python library that enables you to test your payload against all requests of a certain domain. It crawls all requests (e.g. GET, POST or PUT) in the specified scope and keeps track of …

This package can be installed using pip: Optional arguments: Install the required packages: Install this package directly: Or build a wheel: This package makes use of the following external libraries:

Project Eagle is a plugin based vulnerabilities scanner with threading support used for detection of low-hanging bugs on mass scale This mode is only for checking online targets

Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will make a request to these URLs and try to detect changes based on…

• This tool is for educational purposes only. • We are not responsible for any illegal usage of this tool. LFITester is a Python3 tool which tests if a server is vulnerable to Local File Inclusion (L…

Except those to twitter, youtube, oxford and bugcrowd (this may change in the future). 🥢 You can define the port on the .env file

Except those to twitter, youtube, oxford and bugcrowd (this may change in the future).

First, built the docker image of the flask server using the provided Dockerfile. If everything is alright, you should see this message: You can just open another terminal or anywhere in your local ne…

⚡ Unified LLM data management to drive accuracy at scale ⚡ A one-line Python integration to manage your LLM data. Use Log10 to log both closed and open-source LLM calls. It helps you: Log10 offers va…

INTRO: Miner in the Middle is a script that allows you to inject javascript miners into targets on your local network. It does this using python, scapy and netfilterqueue. When you run the applicatio…

All In One, Fast, Easy Recon Tool

ticketutil is a Python module that allows you to easily interact with various ticketing tools using their REST APIs. Currently, the supported tools are JIRA, RT, Redmine, Bugzilla, and ServiceNow. Al…

The main idea is to inject a custom code inside Python process (already running or going to be launched) and analyze its behavior with no any code modifications. Say no to "prints" and garbage in deb…

GrepAddr takes input from stdin and extracts different kinds of addresses from stdin like URLs, IP addresses, e-mail addresses, MAC addresses and more. Essentially it's grep, but for interesting addr…