ivan-sincek

🥭

I love mangoes.

Ivan Šincek ivan-sincek

🥭

I love mangoes.

Lead offensive security engineer, bug hunter, blockchain, and AI enthusiast - sharing security-related code in my free time.

673 followers · 6 following

Highlights

ivan-sincek Public

My profile info.

4 1 Updated Oct 5, 2026
secure-code-review-agent-skills Public

Easy-to-use, customizable, high-quality secure code review skills for AI agents.

agent security ai skills penetration-testing bug-bounty offensive-security

1 MIT License Updated Sep 28, 2026
vulnerability-management-agent-skills Public

Easy-to-use, customizable, high-quality vulnerability management skills for AI agents.

agent security ai skills penetration-testing bug-bounty offensive-security

2 MIT License Updated Sep 7, 2026
threat-modeling-agent-skills Public

Easy-to-use, customizable, high-quality threat modeling skills for AI agents.

agent security ai skills penetration-testing bug-bounty threat-modeling

2 MIT License Updated Sep 7, 2026
powershell-reverse-tcp Public

PowerShell scripts for communicating with a remote host.

security networking tcp reverse-shell powershell penetration-testing bug-bounty

PowerShell 300 65 MIT License Updated Aug 10, 2026
chad Public

Search Google Dorks like Chad. / Broken link hijacking tool.

python search-engine security crawler scraper google social-media

Python 33 5 MIT License Updated Jul 20, 2026
nagooglesearch Public

Not another Google searching tool.

python search-engine security google requests penetration-testing bug-bounty

Python 14 MIT License Updated Jul 12, 2026
nagooglesearch-playwright Public

Not another Google searching tool.

Python 1 MIT License Updated Jul 12, 2026
malware-apk Public

As a bug hunter, are your bug bounty reports getting rejected because you don't use a "malicious" Proof of Concept (PoC) app to exploit the vulnerabilities? I've got you covered!

android java security sqlite malware penetration-testing bug-bounty

Java 154 42 MIT License Updated Jul 1, 2026
auto-recon Public

Not another auto-reconnaissance framework.

python security osint penetration-testing bug-bounty offensive-security ethical-hacking

Python 5 1 MIT License Updated May 25, 2026
browser-extension-automation Public

Run a browser extension in a sandboxed web browser and without any fear of corrupting or loosing your real data.

python chrome-extension security chrome automation web chromium

Python 5 1 MIT License Updated May 9, 2026
penetration-testing-cheat-sheet Public

Work in progress...

security osint web enumeration penetration-testing bug-bounty exploitation

PHP 846 166 MIT License Updated Apr 29, 2026
android-penetration-testing-cheat-sheet Public

Work in progress...

android security penetration-testing bug-bounty magisk mobsf frida

JavaScript 492 78 MIT License Updated Apr 18, 2026
bot-safe-agents Public

A library for fetching a list of bot-safe user agents.

python security browser scraping crawling rate-limiting penetration-testing

Python 5 MIT License Updated Mar 15, 2026
scrapy-scraper Public

Web crawler and scraper based on Scrapy and Playwright's headless browser.

javascript python security crawler scraper downloader web

Python 17 7 MIT License Updated Mar 10, 2026
php-reverse-shell Public

PHP shells that work on Linux OS, macOS, and Windows OS.

windows macos linux php security web networking

PHP 575 157 GNU General Public License v2.0 Updated Feb 27, 2026
java-reverse-tcp Public

JAR, Java, and JSP shells that work on Linux OS, macOS, and Windows OS.

security web networking reverse-shell log4j web-shell penetration-testing

Java 74 14 MIT License Updated Feb 27, 2026
file-scraper Public

Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.

python security strings incident-response scraping penetration-testing bug-bounty

Python 19 3 MIT License Updated Feb 25, 2026
property-lister Public

Extract and convert property list files from SQLite database files and from other property list files.

python security ios mobile database xml cache

Python 8 1 MIT License Updated Feb 25, 2026
forbidden Public

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

python security web curl penetration-testing brute-force bug-bounty

Python 257 52 MIT License 1 issue needs help Updated Feb 25, 2026
ios-penetration-testing-cheat-sheet Public

Work in progress...

security ios penetration-testing bug-bounty mobsf frida offensive-security

JavaScript 424 79 MIT License Updated Feb 24, 2026
amounts Public

Generate a wordlist to fuzz amounts or any other numerical values.

python security finance quality-control currency payments penetration-testing

Python 11 3 MIT License Updated Nov 22, 2024
go-actions Public archive

Golang SAST workflows.

testing golang yaml workflows sast github-actions golangci-lint

Go 2 MIT License Updated Nov 17, 2024
solidity-learning Public

Work in progress...

javascript unit-testing ethereum smart-contracts blockchain truffle solidity

JavaScript 4 1 MIT License Updated Sep 20, 2024
wifi-penetration-testing-cheat-sheet Public

Work in progress...

security wifi penetration-testing bug-bounty offensive-security evil-twin ethical-hacking

558 86 MIT License Updated Sep 20, 2024
xss-catcher Public

Simple API for storing all incoming XSS requests and various XSS templates.

javascript api php cors security web xss

HTML 50 7 MIT License Updated Jul 18, 2024
dns-exfiltrator Public archive

Exfiltrate data with DNS queries. Based on CertUtil and NSLookup.

dns security networking malware penetration-testing batch bug-bounty

Batchfile 24 8 MIT License Updated Dec 30, 2023
jwt-bf Public archive

Brute force a JWT token. Script uses multithreading.

python security jwt web penetration-testing brute-force bug-bounty

Python 9 1 MIT License Updated Dec 24, 2023
mixaudit-sarif Public archive

Convert MixAudit's JSON formatted results to SARIF format.

testing yaml elixir workflows sast github-actions sobelow

Python 1 MIT License Updated Nov 26, 2023
python-actions Public archive

Python SAST workflows.

python testing yaml pytest workflows sast github-actions

Python 1 MIT License Updated Sep 5, 2023

Ivan Šincek ivan-sincek

Highlights

ivan-sincek Public

Uh oh!

secure-code-review-agent-skills Public

Uh oh!

vulnerability-management-agent-skills Public

Uh oh!

threat-modeling-agent-skills Public

Uh oh!

powershell-reverse-tcp Public

Uh oh!

chad Public

Uh oh!

nagooglesearch Public

Uh oh!

nagooglesearch-playwright Public

Uh oh!

malware-apk Public

Uh oh!

auto-recon Public

Uh oh!

browser-extension-automation Public

Uh oh!

penetration-testing-cheat-sheet Public

Uh oh!

android-penetration-testing-cheat-sheet Public

Uh oh!

bot-safe-agents Public

Uh oh!

scrapy-scraper Public

Uh oh!

php-reverse-shell Public

Uh oh!

java-reverse-tcp Public

Uh oh!

file-scraper Public

Uh oh!

property-lister Public

Uh oh!

forbidden Public

Uh oh!

ios-penetration-testing-cheat-sheet Public

Uh oh!

amounts Public

Uh oh!

go-actions Public archive

Uh oh!

solidity-learning Public

Uh oh!

wifi-penetration-testing-cheat-sheet Public

Uh oh!

xss-catcher Public

Uh oh!

dns-exfiltrator Public archive

Uh oh!

jwt-bf Public archive

Uh oh!

mixaudit-sarif Public archive

Uh oh!

python-actions Public archive

Uh oh!