Damian89

extended-ssrf-search

Smart ssrf scanner using different methods like parameter brute forcing in post and get...

extended-xss-search

A better version of my xssfinder tool - scans for different types of xss on a list of urls.

ffufPostprocessing

Golang tool which helps dropping the irrelevant entries from your ffuf result file.

xssfinder

Toolset for detecting reflected xss in websites

yataf

yataf extracts secrets and paths from files or urls - its best used against javascript files

commonCrawlParser

Simple multi threaded tool to extract domain related data from commoncrawl.org

simple-oob-scanner

Simple tool to test for SSRF/OOB HTTP Read within the Path of a request

extended-baserequest-importer

Scan and import relevant requests directly to burp!

ffuf

Fast web fuzzer written in Go

ml-seotool

My-Shodan-Scripts

Collection of Scripts for shodan searching stuff.

Acamar

A Python3 based single-file subdomain enumerator

Turbolist3r

Subdomain enumeration tool with analysis features for discovered domains

altdns

Generates permutations, alterations and mutations of subdomains and then resolves them

amass

In-depth subdomain enumeration written in Go

annoy

Approximate Nearest Neighbors in C++/Python optimized for memory usage and loading/saving to disk

CVE-2018-2893

CVE-2018-2893

eacl24-german-legal-questions

Data and code: "Answering legal questions from laymen in German civil law system", Büttner & Habernal, EACL'24

FlagEmbedding

Dense Retrieval and Retrieval-augmented LLMs

keyhacks

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

kubernetes-cis-benchmark

A set of scripts inspired by CIS Kubernetes Benchmark that checks best-practices of Kubernetes installations

laravel

A PHP Framework For Web Artisans

laravel-query-detector

Laravel N+1 Query Detector

numerai-sklearn-example

Sample Script for numer.ai's weekly challange - check blogpost

off-by-slash

Burp extension to detect alias traversal via NGINX misconfiguration at scale.

param-miner

Python

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

shelling

SHELLING - a comprehensive OS command injection payload generator

Telewreck

A Burp extension to detect and exploit versions of Telerik Web UI vulnerable to CVE-2017-9248.