Response Filter Denial of Service (RFDoS) Experimental Scanner

My experiments in weaponizing ONOS applications (https://github.com/opennetworkinglab/onos)

URL / IP / Email defanging with Javascript. Make IoC harmless.

Like and retweet your tweets, or search tweets by topic. It stores and serves data with a Flask webapp. 🐦 Live demo running on twitter.com/ai_testing

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

Sub-Domain TakeOver Vulnerability Scanner (edoardottt fork)

Master of Science in Cybersecurity, Sapienza University of Rome.

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Customized Password/Passphrase List inputting Target Info

The Most Advanced Client-Side Prototype Pollution Scanner

My useful files for penetration tests, security assessments, bug bounty and other security related stuff

Use favicons to improve your target recon phase. Quickly detect technologies, WAF, exposed panels, known services.

List of companies that hire security people full remote.

Notes I took while preparing for eJPT certification by INE Security (passed 19/20, fka eLearn Security)

Little Bug Bounty & Hacking Tools⚔️

CompTIA Security+ SY0-601 notes (passed 788 points)

CLI client (and Golang module) for deps.dev API. Free access to dependencies, licenses, advisories, and other critical health and security signals for open source package versions.

Collection of (4000+) malicious rMQR Codes for Penetration testing, Vulnerability assessments, Red Team operations, Bug Bounty and more

Highly customizable low-interaction experimental honeypot that mimics specific hosts.

download statistics for npm packages

Hash collisions and exploitations

TryHackMe CTFs writeups, notes, drafts, scrabbles, files and solutions.

💊 Application to use ReVanced on Android

Weekly updated list of missing CVEs in nuclei templates official repository. Mainly built for bug bounty, but useful for penetration tests and vulnerability assessments too.

URL / IP / Email defanging with Golang. Make IoC harmless.

Discover new target domains using Content Security Policy

A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more

Official GitHub Action for golangci-lint from its authors

Estimate how long it takes to read a text