Skip to content
View hpy's full-sized avatar

Highlights

  • Pro

Block or report hpy

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

Home Assistant SunPower Integration using the local installer ethernet interface.

Python 97 37 Updated Sep 30, 2025

Quickly find differences and similarities in disassembled code

Java 3,114 235 Updated Jul 24, 2026

The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.

TypeScript 479 53 Updated Oct 3, 2023

A set of simple servers (currently HTTP/HTTPS and DNS) which allow configurable and scriptable responses to network requests.

Python 60 6 Updated Aug 5, 2022

A Burp Suite extension for finding DNS vulnerabilities in web applications!

Java 91 14 Updated Sep 12, 2023

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

Dockerfile 288 42 Updated Aug 24, 2024

IIS shortname scanner written in Go

Go 357 44 Updated Mar 25, 2023

Resources for the deps.dev API

Go 428 51 Updated Jul 21, 2026

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

Go 1,093 137 Updated Mar 24, 2026

This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible t…

Shell 302 44 Updated Apr 9, 2026

🎤⌨️ Acoustic keyboard eavesdropping

C++ 9,012 607 Updated Jan 15, 2023

Extract JavaScript files from burp suite project with ease.

Kotlin 97 15 Updated Feb 19, 2022

A library for detecting known secrets across many web frameworks

Python 815 83 Updated Jul 7, 2026

The result of scraping over 500 million web pages to form the mother of all wordlists

9 2 Updated Jun 1, 2023

Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet

Java 57 9 Updated Oct 23, 2024
Rust 35 8 Updated Feb 10, 2023

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Python 1,368 150 Updated Aug 7, 2025

Grammar-based HTTP/1 fuzzer with mutation ability

Python 263 32 Updated Oct 30, 2024
Go 6 1 Updated Feb 25, 2023

Hidden parameters discovery suite

Rust 2,086 196 Updated Sep 8, 2024

Detects request smuggling via HTTP/2 downgrades.

Python 94 10 Updated Jul 30, 2022

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

Python 412 42 Updated Dec 24, 2022

declutters url lists for crawling/pentesting

Python 1,584 173 Updated Feb 23, 2025

Cybersecurity of Machine Learning and Artificial Intelligence

JavaScript 69 21 Updated Mar 4, 2022

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

Python 374 87 Updated Apr 14, 2022

Parse HPROF files from the Spring Boot Heapdump Actuator

Python 30 5 Updated Jun 11, 2024

A tool to dump Java serialization streams in a more human readable form.

Java 1,078 126 Updated Jun 21, 2024

TLS Redirection

117 21 Updated Nov 21, 2017
Go 77 13 Updated Jul 10, 2026
Next