Starred repositories
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
A simple zero-config tool to make locally trusted development certificates with any names you'd like.
A self-hosted dashboard that puts all your feeds in one place
Send push notifications to your phone or desktop using PUT/POST
The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
A self hosted virtual browser that runs in docker and uses WebRTC.
In-depth attack surface mapping and asset discovery
Directory/File, DNS and VHost busting tool written in Go
An organizer for your porn, written in Go. Documentation: https://docs.stashapp.cc
Monitor linux processes without root permissions
Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wis…
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Fetch all the URLs that the Wayback Machine knows about for a domain
An OOB interaction gathering server and client library
dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.
Bruteforcing from various scanner output - Automatically attempts default creds on found services.
A terrible web ui and RPC server for yt-dlp. Designed to be self-hosted.
bepass-org / warp-plus
Forked from WireGuard/wireguard-goWarp+Psiphon, an anti censorship utility for iran
Extract URLs, paths, secrets, and other interesting bits from JavaScript
MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.