Hidden parameters discovery suite

MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.

XSS payloads designed to turn alert(1) into P1

JavaScript functions intended to be used as an XSS payload against a WordPress admin account.

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

Electron JS Browser To Find XSS Vulnerabilities Automatically

CeWL is a Custom Word List Generator

Alternative to XSS Hunter for blind XSS.

Graphql introspection query analyzer.

My Priv8 Nuclei Templates

An IIS short filename enumeration tool

Deserialization payload generator for a variety of .NET formatters

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…

weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-32…

Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.