Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found
☆344Nov 6, 2023Updated 2 years ago
Alternatives and similar repositories for dora
Users that are interested in dora are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automated Web Recon Shell Scripts☆54Dec 6, 2021Updated 4 years ago
- Jeeves SQLI Finder☆215May 13, 2022Updated 4 years ago
- List of fresh DNS resolvers updated daily☆103Feb 9, 2023Updated 3 years ago
- Running nuclei Continuously☆57Nov 11, 2022Updated 3 years ago
- Useful "Match and Replace" burpsuite rules☆375Sep 26, 2023Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆427Jul 21, 2026Updated 3 weeks ago
- Python based Discord bot Which allows you to run tools like nmap and amass from discord☆29Oct 23, 2022Updated 3 years ago
- Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)☆42Nov 10, 2025Updated 9 months ago
- ⚡ FastDork speeds up repetitive dorking: build reusable lists, open search tabs in batches, and import matching results without copying l…☆144Jul 5, 2026Updated last month
- ☆59Apr 8, 2021Updated 5 years ago
- Some simple scripts that I use during bug bounty hunting in Android Apps☆29Jan 30, 2025Updated last year
- A Burp Suite extension for identifying injection flaws (LFI, RCE, SQLi), authentication/authorization issues, and HTTP 403 access violati…☆401May 28, 2026Updated 2 months ago
- List of Hourly Updated Fresh DNS resolvers☆115Updated this week
- ☆384May 17, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The second version of SQL Hunter. SQLi Hunter is a URL (Blind) SQL injection checker for multiple pages.☆94Mar 4, 2023Updated 3 years ago
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆360Jul 17, 2023Updated 3 years ago
- Filter and enrich a list of subdomains by level☆215Sep 25, 2023Updated 2 years ago
- Gotator is a tool to generate DNS wordlists through permutations.☆530Jul 17, 2022Updated 4 years ago
- You can find hardcoded Api-Key,Secret,Token Etc..☆77Sep 3, 2022Updated 3 years ago
- Hidden parameters discovery suite☆225Nov 14, 2022Updated 3 years ago
- ☆38Nov 27, 2020Updated 5 years ago
- Community edition nuclei templates, a simple tool that allows you to organize all the Nuclei templates offered by the community in one pl…☆1,046Jun 6, 2026Updated 2 months ago
- A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a …☆719Feb 23, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Hidden parameters discovery suite☆2,090Sep 8, 2024Updated last year
- A fast DOM based XSS vulnerability scanner with simplicity.☆866Sep 30, 2022Updated 3 years ago
- Discover hidden debugging parameters and uncover web application secrets☆248Feb 4, 2026Updated 6 months ago
- Detailed information about API key / OAuth token (Description, Request, Response, Regex, Example)☆299Sep 26, 2023Updated 2 years ago
- Little Bug Bounty & Hacking Tools⚔️☆386Mar 30, 2026Updated 4 months ago
- DNS resolution tracing tool☆37Jun 29, 2021Updated 5 years ago
- Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.☆196Dec 29, 2023Updated 2 years ago
- Most of the Google Acquisitions for Bug Bounty Hunter.☆67Sep 3, 2022Updated 3 years ago
- A simple tool that helps to find assets/domains based on the Google Analytics ID.☆180Jan 12, 2026Updated 7 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Asset inventory of over 800 public bug bounty programs.☆1,600Feb 14, 2025Updated last year
- De-clutter a list of URLs☆391Mar 8, 2026Updated 5 months ago
- JF⚡can - Super fast port scanning & service discovery using Masscan and Nmap. Scan large networks with Masscan and use Nmap's scripting a…☆668Feb 19, 2026Updated 5 months ago
- Nuclei Templates - Here you will find the templates I use while hunting☆120Aug 2, 2026Updated last week
- XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.☆314Jun 1, 2022Updated 4 years ago
- 3klector is an automation Recon tool which collecting information about Acquisitions and ASN which related to Big Scope company☆47Sep 19, 2022Updated 3 years ago
- Get related domains / subdomains by looking at Google Analytics IDs☆254Jun 3, 2022Updated 4 years ago