Python tool for converting files and office documents to Markdown.

Generative AI reference workflows optimized for accelerated infrastructure and microservice architecture.

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

A smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery

Automated All-in-One OS Command Injection Exploitation Tool

A fast tool to scan SAAS,PAAS App written in Go

A flaky network simulator for your mobile app

PaddingZip is a tool that you can craft a zip file that contains the padding characters between the file content.

see the wiki

Simple "postMessage logger" Chrome extension

"Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

Quickly Search Large DNS Datasets

An open source intelligence tool to crawl the graph of certificate Alternate Names

GraphQLmap is a scripting engine to interact with a graphql endpoint for pentesting purposes.

A toolset to track and organize output of reconnaissance tools

LDNS is a DNS library that facilitates DNS tool programming

Automated penetration testing & attack surface management platform. Recon, scan, exploit, report — 600+ exploits, 90+ integrations, 10K+ detections.

Alpha version code of Recon UI

A script to set up a quick Ubuntu 17.10 x64 box with tools I use.

Automate Pentest Tool

CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.

A collection of hacks and one-off scripts

Analyze the security of any domain by finding all the information possible. Made in python.

Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

Open Redirect Payloads