mud1t

lemma

Remote CLI tools at your fingertips

noir

Attack surface detector that identifies endpoints by static analysis

stride-gpt

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

headerpwn

A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

python-for-awae

Python for AWAE (Advanced Web Attacks and Exploitation)

http-request-smuggling

HTTP Request Smuggling Detection Tool

BugBazaar

Android BugBazaar: Your mobile appsec playground to Explore, Exploit, Excel

My-Presentation-Slides

Collection's of Tech Talk that are presented by me :)

wrongsecrets

Vulnerable app with examples showing how to not use secrets

ipatool

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

APKDeepLens

Android security insights in full spectrum.

xsshunter-go

XSSHunter written in Go with more notifications and features

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

403jump

HTTP 403 bypass tool

pingback.transfer

Use WordPress pingback.ping to transfer files.

smugglefuzz

A rapid HTTP downgrade smuggling scanner written in Go.

wafer

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

http-garden

Differential testing and fuzzing of HTTP servers and proxies

burp-menu-level

一个用于修改右键插件菜单层级的Burpsuite插件。A simple BurpSuite extension to change extension context menu level.

xsshunter

Awesome-GPT-Agents

A curated list of GPT agents for cybersecurity

Stirling-PDF

#1 Locally hosted web application that allows you to perform various operations on PDF files

sheye

Opensource assets and vulnerability scanning tool

Portswigger_labs

This repository contains my writeups for the labs in PortSwigger's Web Security Academy platform. Each lab writeup includes the lab's name, description, and my step-by-step solution, as well as any additional notes or observations.

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

domscan

Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

My-CTF-Challenges

Challenges I wrote for various CTF competitions

postMessage-poc

ApkRecon

Scanning APK file for URIs, endpoints & secrets.