Advanced credential stuffing with PEPE
Script parses Pastebin email:password dumps and collects information about each email address. It supports Google, Truma
Tracking the trackers. Draw connections between scripts and domains on website.
Kupa3 allows you to draw connections between scripts on specific website. It search for javascript code or source attrib
OSINT tool for visualizing relationships between domains, IPs and email addresses.
I wrote a script, which takes domain, IP or email address as input and search it in various services like: Whois, Revers
Command and control server in social media (Twitter, Instagram, Youtube + Telegram)
As a proof of concept, I wrote script which abuses social media in order to send commands to infected machines, i.e bots
OSINT : Chasing Malware + C&C Servers
Looking for malware or command and control servers? I wrote a script named Daily dose of malware, which gather informati
How I Discovered 50k Australian Bank & Government Records (Data Breach) Online
Originally published on October 29th, 2017TL;DR With help of AWS3dump and my poor coding skills I found database backups
How To Scan Multiple Organizations With Shodan and Golang (OSINT)
I wrote a script in Go, which queries Shodan database based on given list of organizations. Next, I retrieve all bug bou
How to find internal subdomains? YQL, Yahoo! and bug bounty.
When I’m looking for new target on Hackerone I’m always paying attention to numbers of resolved reports and wonder if hi
Instagram OSINT | What A Nice Picture!
I have made scripts and tools related to OSINT, OPSEC and bug bounting for myself and thought it is not worth sharing, u

Page 2 of 2