sdushantha / dora
Find exposed API keys based on RegEx and get exploitation methods for some of keys that are found
☆319Updated last year
Related projects ⓘ
Alternatives and complementary repositories for dora
- Subdomain finder☆359Updated 4 months ago
- Turns any junk text into a usable wordlist for brute-forcing.☆217Updated 7 months ago
- Uncover the full name of a target on Linkedin.☆154Updated 2 years ago
- DorkScout - Golang tool to automate google dork scan against the entiere internet or specific targets☆232Updated 3 years ago
- A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python☆197Updated 3 years ago
- Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, AP…☆151Updated 2 years ago
- 🕵️ Pinkerton is an JavaScript file crawler and secret finder tool developed in Python☆280Updated 9 months ago
- Scan only once by IP address and reduce scan times with Nmap for large amounts of data.☆385Updated last year
- Generate Email, Register for anything, Get the OTP/Link☆574Updated last year
- Http request smuggling vulnerability scanner☆221Updated 2 years ago
- XSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.☆311Updated 2 years ago
- ☆365Updated 3 years ago
- Fleex makes it easy to create multiple VPS on cloud providers and use them to distribute workloads.☆249Updated 2 months ago
- Weaponizing WaybackUrls for Recon, BugBounties , OSINT, Sensitive Endpoints and what not☆265Updated last month
- A command-line utility designed to help you discover URLs for a given domain in a simple, efficient way. It works by gathering informatio…☆562Updated 3 weeks ago
- ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )☆682Updated last year
- Modular personalized dictionary generator.☆189Updated 2 months ago
- 「🔑」A tool used to hunt down API key leaks in JS files and pages☆574Updated 2 months ago
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆336Updated last year
- Generate tens of thousands of subdomain combinations in a matter of seconds☆252Updated last year
- Find subdomains with GPT, for free☆333Updated 6 months ago
- Discover new target domains using Content Security Policy☆379Updated this week
- automated web assets enumeration & scanning [DEPRECATED]☆285Updated last year
- jsleak is a tool to find secret , paths or links in the source code during the recon.☆476Updated last month
- Wordlists handcrafted (and automated) with ♥☆190Updated 7 months ago
- Get related domains / subdomains by looking at Google Analytics IDs☆226Updated 2 years ago
- Golang client for querying SecurityTrails API data☆538Updated last year
- Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search …☆513Updated 9 months ago
- 🌯 Give me a web shell, I'll give you a terminal.☆182Updated 2 years ago
- Prototype pollution scanner using headless chrome☆197Updated 2 years ago