I'm an 18 year old enby from New Zealand, my Mum says I think too much. In my free time, I'm a gay fox on the internet breaking as much shit as humanly possible. I'm responsible for 17 CVE submissions and I have commendations from PayPal, Google and Tesla. Anyways, enjoy my schizophrenic infodumping and occasional wisdom.
An intuitive way to parse Firebase credentials from .apk files and automatically test them.
Browser extension that monitors all network requests, searches them for JWT tokens and decodes the data.
Resolves domains to Azure tenant IDs and login portals.
Scan Git repositories and profiles for PHP functions that look vulnerable and saves them for further analysis.
Scrapes Laravel error pages via Shodan, downloads and parses the results, then displays all credentials reported in the error page and (optionally) reports them to a Telegram bot.