thehlopster

caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

codon

A high-performance, zero-overhead, extensible Python compiler using LLVM

flet

Flet enables developers to easily build realtime web, mobile and desktop apps in Python. No frontend experience required.

WizardLM

LLMs build upon Evol Insturct: WizardLM, WizardCoder, WizardMath

artillery

The complete load testing platform. Everything you need for production-grade load tests. Serverless & distributed. Load test with Playwright. Load test HTTP APIs, GraphQL, WebSocket, and more. Use any Node.js module.

GameNetworkingResources

A Curated List of Multiplayer Game Network Programming Resources

colyseus

⚔ Multiplayer Framework for Node.js

bbot

A recursive internet scanner for hackers.

fuzz.txt

Potentially dangerous files

malicious-pdf

💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh

x8

Hidden parameters discovery suite

waymore

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!

nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

clairvoyance

Obtain GraphQL API schema even if the introspection is disabled

recollapse

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

hyperdiv

Build reactive web UIs in Python

nuclei-wordfence-cve

The EXCLUSIVE Collection of 38,000+ Nuclei templates based on Wordfence intel. Daily updates for bulletproof WordPress security.

goop

Yet another tool to dump a git repository from a website, focused on as-complete-as-possible dumps and handling weird edge-cases.

blackboxprotobuf

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

firefly

Black box fuzzer for web applications

misconfig-mapper

Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/or bug bounty targets!

missing-cve-nuclei-templates

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

bbFuzzing.txt

guidtool

A tool to inspect and attack version 1 GUIDs

Bitmancer

Nim Library for Offensive Security Development

ropci

So, you think you have MFA? AAD/ROPC/MFA bypass testing tool

hfuzz

Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.

SocksHarvester

SocksHarvester quickly tests SOCKS4/5 proxies and lists the valid ones. Ideal for network professionals with its multi-threading support.

nim0

Nim0 is a toy compiler for a limited subset of Nim language, all in 5 heavily documented source files so that you can understand them. It is a port of Niklaus Wirth's Oberon-0 compiler.

promocode-wordlist

Promocode wordlist