KbaHaxor

h1domains

HackerOne "in scope" domains

gophish

Open-Source Phishing Toolkit

anything-llm

The all-in-one Desktop & Docker AI application with full RAG and AI Agent capabilities.

windows

Windows inside a Docker container.

custom-bcheck-scan

This repository stores some of my custom BCheck Scan configurations. Its goal is to identify intriguing elements that warrant further manual testing.

xnLinkFinder

A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

Kraken

Kraken, a modular multi-language webshell coded by @secu_x11

ASP.NET-Memshell-Scanner

asp.net内存马检测工具

trufflehog

Find and verify secrets

tracker-radar

Data set of top third party web domains with rich metadata about them

avred

Analyse your malware to surgically obfuscate it

hakuin

A blazing fast Blind SQL Injection optimization and automation framework.

unleashed-firmware

Flipper Zero Unleashed Firmware

yakit

Cyber Security ALL-IN-ONE Platform

MOVEit-Transfer

A repository for tracking events related to the MOVEit Transfer Cl0p Campaign

alterx

Fast and customizable subdomain wordlist generator using DSL

GAP-Burp-Extension

Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist

Imperva_gzip_WAF_Bypass

recon-ninja

Recon-Ninja

pdtm

ProjectDiscovery's Open Source Tool Manager

reconftw

reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

probable_subdomains

Subdomains analysis and generation tool. Reveal the hidden!

csprecon

Discover new target domains using Content Security Policy

ghauri

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Web3-Security-Library

Information about web3 security and programming tutorials/tools

changedetection.io

The best and simplest free open source web page change detection, website watcher, restock monitor and notification service. Restock Monitor, change detection. Designed for simplicity - Simply monitor which websites had a text change for free. Free Open source web page change detection, Website defacement monitoring, Price change notification

unwebpack-sourcemap

Extract uncompiled, uncompressed SPA code from Webpack source maps.

fuzzuli

fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.

inventory

Asset inventory of over 800 public bug bounty programs.