Icex0 Claim this profile

Automated Firebase recon and security scanner. Extracts from APKs, IPAs or web and checks for unauthorized read and write access on Firestore, Realtime Database, Storage buckets, Remote Config, Cloud Functions, and detects hardcoded service account keys.

Detects anti-AiTM measures in company branding custom CSS files

Security audit tool for Active Directory. Automates a lot of checks from a pentester perspective.

AWS security scanner that finds hardcoded secrets and internet-exposed resources across all regions and 30+ AWS services.

A practical Firebase pentest checklist covering Auth, Realtime database, Firestore, Storage, Remote Config, Functions, and IAM. Includes OpenFirebase commands and clear finding criteria per service

wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain

Wordlists for fuzzing Firebase Cloud Functions and Firestore collections, mined from public GitHub source code. Ranked by real-world usage across thousands of repos. Drop-in for OpenFirebase, Fuff etc. Black-box recon for bug bounty and pentesting.

Secure npm, pnpm, Yarn, and Bun installs by running install scripts in a sandbox with restricted filesystem access, filtered network egress, and a temporary home directory.

Security tool to easily exploit Firebase and show impact, if you manage to find a leaked service account and its private key

Stream any movie or TV show in sync with friends. Inlcudes W2G chatrooms. No torrenting or complex infra setup.

Web application with common vulnerabilities for testing/assessments

No description.

Reverse engineering and pentesting for Android applications

Scanning APK file for URIs, endpoints & secrets.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

Build Netexec binary for ARM64 with dockerfile

List drivers with install date (workaround for empty InstallDate in Win32_SystemDriver)