Skip to content
View joohoi's full-sized avatar
🦨
🦨

Sponsors

@projectdiscovery

Organizations

@certbot @TurkuSec @ffuf @citysecs @kybervpk @visma-prodsec

Block or report joohoi

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.

Python 21 1 Updated May 13, 2026

Rust tool to detect cell site simulators on an orbic mobile hotspot

Rust 5,400 444 Updated Jul 21, 2026

A proof-of-concept of a self-replicating malware for Maven build environments.

Java 6 Updated Mar 27, 2025

Webhood is a privately hosted URL scanner used by threat hunters and security analysts for analyzing phishing and malicious sites.

CSS 33 6 Updated Oct 7, 2024

🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡

Python 1,411 97 Updated Mar 5, 2025

Fast web fuzzer written in Go

Go 16,424 1,580 Updated Jul 19, 2026

Check which CDN providers an IP list belongs to

Go 192 35 Updated May 10, 2023

Rockyou for web fuzzing

Go 3,201 541 Updated Mar 11, 2026

DLL Hijack Search Order Enumeration BOF

C 148 20 Updated Nov 3, 2021

Fake Protocol Server

Python 1,611 181 Updated Jan 2, 2025

Target practice for ffuf

PHP 75 13 Updated Aug 10, 2021

An OOB interaction gathering server and client library

Go 4,455 472 Updated Jul 15, 2026

Fraktal's Ransomware Emulator

C# 103 23 Updated Apr 5, 2024

REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that ena…

F# 263 41 Updated Jan 13, 2022

zero-trust remote firewall instrumentation

Go 265 31 Updated Jan 19, 2026

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

PowerShell 528 113 Updated Jan 21, 2022

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

Python 884 125 Updated Sep 1, 2023

Tool to check for dependency confusion vulnerabilities in NuGet package management systems

C# 15 5 Updated Mar 6, 2021

Tool to check for dependency confusion vulnerabilities in multiple package management systems

Go 786 109 Updated Aug 19, 2024

Data exfiltration over DNS request covert channel

JavaScript 888 190 Updated Apr 29, 2024

A client software for https://github.com/joohoi/acme-dns

Go 137 26 Updated Jun 29, 2023

PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.

Vue 328 54 Updated Jul 31, 2024

qsinject (Query String Inject) is a tool that allows you to quickly substitute query string values with regex matches, one-at-a-time.

Go 30 8 Updated May 6, 2020

HackerOne "in scope" domains

Python 529 134 Updated Jul 24, 2026

Frida Scripts

JavaScript 660 137 Updated Sep 26, 2022

A thorough library database to assist with binary exploitation tasks.

Python 197 16 Updated Aug 1, 2022

Make temporary edits to your Go module dependencies

Go 912 19 Updated Jun 3, 2025

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Go 37,051 552 Updated Jul 23, 2026

CodiMD - Realtime collaborative markdown notes on all platforms.

JavaScript 10,118 1,122 Updated Oct 2, 2025

Private keys that have become public ...

PHP 185 30 Updated Jul 9, 2026
Next