Malspider is a web spidering framework that detects characteristics of web compromises.

🤖 Telegram Bot written on Python for basic web-app analysis.

A utility to test the success of xss payloads on a target website. Use responsibly.

A collection of often-used scripts and tools

Extract endpoints from stdin or files.

Automatically exploit time-based blind SQL injection vulnerabilities

Content Discovery/Directory Brute-forcing using Python3

The Clara S. Traversal's classroom is an intermediate level web security challenge (black box) where you will have to exploit both client-side and server-side vulnerability in order to change a student grade. Can you hack the class and get in? Access teacher only features? Do even more than the teacher can? Good luck!

writeups/solvers for CTF challenges

Repository for my GitBook (CTF writeups / vuln research / bugbounty)

a commandline #OSINT tool to find the online presence of a username in popular social media websites like Facebook, Instagram, Twitter, etc.

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Encoder to bypass WAF filters using XOR operations.

Web Content Discovery Tool

Find web directories without bruteforce