How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
This project is a GitHub secret scanner and dorking tool designed to identify leaked credentials and private keys within repositories. It functions as an API reconnaissance utility that uses curated search queries and automated dorks to locate sensitive data across public and enterprise GitHub instances. The tool enables security vulnerability research and enterprise auditing by targeting both public cloud instances and private enterprise installations via configurable base URLs. It utilizes token-based authentication to access private repository content and bypass API rate limits. The syste
AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing. It serves as a reference resource covering common web vulnerabilities and exploitation methods for security researchers, providing a structured approach to identifying and exploiting web application security flaws in bug bounty programs. The repository covers a wide range of attack categories including authentication bypass, cross-site scripting injection, server-side request forgery, web cache poisoning, and business logic abuse. It includes techniques for bypassing access co
W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering.
jsleak is a tool to find secret , paths or links in the source code during the recon.
A simple reverse whois lookup tool which returns a list of domains owned by people or companies
The main features of harleo/knockknock are: Reconnaissance and Dorking.
Open-source alternatives to harleo/knockknock include: daffainfo/allaboutbugbounty — AllAboutBugBounty is a curated collection of bug bounty techniques and payloads for web application security testing.… techgaun/github-dorks — This project is a GitHub secret scanner and dorking tool designed to identify leaked credentials and private keys… c3n7ral051nt4g3ncy/webosint — W3b0s1nt (WebOSINT) is a Python tool/script for passive Domain Intelligence gathering. d3ext/aort. channyein1337/jsleak — jsleak is a tool to find secret , paths or links in the source code during the recon. blacknon/pydork — Scraping and listing text and image searches on Google, Bing, DuckDuckGo, Baidu, Yahoo japan.