This project is a GitHub secret scanner and dorking tool designed to identify leaked credentials and private keys within repositories. It functions as an API reconnaissance utility that uses curated search queries and automated dorks to locate sensitive data across public and enterprise GitHub instances. The tool enables security vulnerability research and enterprise auditing by targeting both public cloud instances and private enterprise installations via configurable base URLs. It utilizes token-based authentication to access private repository content and bypass API rate limits. The syste
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering.
jsleak is a tool to find secret , paths or links in the source code during the recon.
The main features of d3ext/aort are: Reconnaissance and Dorking.
Open-source alternatives to d3ext/aort include: daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… techgaun/github-dorks — This project is a GitHub secret scanner and dorking tool designed to identify leaked credentials and private keys… c3n7ral051nt4g3ncy/webosint — W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering. channyein1337/jsleak — jsleak is a tool to find secret , paths or links in the source code during the recon. drew-alleman/datasurgeon — Quickly Extracts IP's, Email Addresses, Hashes, Files, Credit Cards, Social Security Numbers and a lot More From Text. blacknon/pydork — Scraping and listing text and image searches on Google, Bing, DuckDuckGo, Baidu, Yahoo japan.