Moat reviews the security posture of your GitHub organization and repositories, then surfaces recommendations to consider.

CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we confi…

An extension to find callback endpoints in the background while searching the Web

CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocke…

Version 0.2 - Exploit Time-based blind-SQL injection in HTTP-Headers (MySQL/MariaDB).

DeepViolet TLS Workbench desktop app and Command Line interface

Rust tool to detect cell site simulators on an orbic mobile hotspot

Deployments of fancy cryptography

RF CHAOS is an Android App That Is Designed To Cause Chaos via All RF Adapters Possible - Enjoy!

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Using GitHub and CDNs to bypass a CSP

Detect when your installed extensions have changed owners.

Passive leak enumeration tool.

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command li…

IP address encryption and obfuscation for PHP.

A Framework for Comparing Password Guessing Strategies

An application that optimizes Hashcat rules using set coverage optimization theory based on rule performance.

Lastest Hashcat rules for password cracking

Python tool for converting files and office documents to Markdown.

Fast passive subdomain enumeration tool.

Template repository for setting up a new ATProto repository backup using GitHub Actions.

Offline, privacy-first grammar checker. Fast, open-source, Rust-powered

Fluent System Icons are a collection of familiar, friendly and modern icons from Microsoft.

💚 End-to-end encrypted cloud for everything.

💀 PHP unused code detection via PHPStan extension. Detects dead cycles, supports libs like Laravel, Symfony, Twig, Doctrine, PHPUnit etc. Can automatically remove dead PHP code. Able to detect dead…

Automated Tool for Testing Header Based Blind SQL Injection