mud1t

Stirling-PDF

#1 Locally hosted web application that allows you to perform various operations on PDF files

ipatool

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

Awesome-GPT-Agents

A curated list of GPT agents for cybersecurity

arsenal

Arsenal is just a quick inventory and launcher for hacking programs

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

jsluice

Extract URLs, paths, secrets, and other interesting bits from JavaScript

wrongsecrets

Vulnerable app with examples showing how to not use secrets

ReconAIzer

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

http-garden

Differential testing and fuzzing of HTTP servers and proxies

noir

Attack surface detector that identifies endpoints by static analysis

http-request-smuggling

HTTP Request Smuggling Detection Tool

APKDeepLens

Android security insights in full spectrum.

403jump

HTTP 403 bypass tool

stride-gpt

An AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.

headerpwn

A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers

smugglefuzz

A rapid HTTP downgrade smuggling scanner written in Go.

wafer

domscan

Simple tool to scan a website for (DOM-based) XSS vulnerabilities and Open Redirects.

sheye

Opensource assets and vulnerability scanning tool

xsshunter

My-Presentation-Slides

Collection's of Tech Talk that are presented by me :)

Portswigger_labs

This repository contains my writeups for the labs in PortSwigger's Web Security Academy platform. Each lab writeup includes the lab's name, description, and my step-by-step solution, as well as any additional notes or observations.

python-for-awae

Python for AWAE (Advanced Web Attacks and Exploitation)

My-CTF-Challenges

Challenges I wrote for various CTF competitions

ApkRecon

Scanning APK file for URIs, endpoints & secrets.

BugBazaar

Android BugBazaar: Your mobile appsec playground to Explore, Exploit, Excel

burp-menu-level

一个用于修改右键插件菜单层级的Burpsuite插件。A simple BurpSuite extension to change extension context menu level.

pingback.transfer

Use WordPress pingback.ping to transfer files.

postMessage-poc

xsshunter-go

XSSHunter written in Go with more notifications and features