CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites that have been protected by CloudFlare. The resulting information is certainly very useful for conducting further penetration testing, and analyzing websites with the same server.

Public append-only ledger microservice built with Slim Framework

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Find AWS S3 buckets and test their permissions.

A static analysis tool for security

🛡️⚔️ Protect your web app from DDOS attack or the Dead Ping + CAPTCHA VERIFICATION in one line!

Some of the best web shells that you might need!

PHP安全SDK及编码规范

Automated cacert.pem management for PHP projects

Recsech is a tool for doing Footprinting and Reconnaissance on the target web. Recsech collects information such as DNS Information, Sub Domains, HoneySpot Detected, Subdomain takeovers, Reconnaissance On Github and much more you can see in Features in tools .

Advanced search in search engines, enables analysis provided to exploit GET / POST capturing emails & urls, with an internal custom validation junction for each target / url found.

A Laravel package to scrub sensitive information that breaks operational security policies from being leaked on accident or not by developers.

A JWT (JSON Web Token) Encoder & Decoder

A PHP tool to brute force vhost configured on a server.

WEB SQLi Injection DB Dumper DATA Hacking Tool

client-side AES-encrypted Markdown pastebin clone

PrestaScan Security is a PrestaShop module allowing you to scan your PrestaShop website to identify malware and known vulnerabilities in PrestaShop core and modules.

Alternative to XSS Hunter for blind XSS.

PHP Static Program Analysis

Canary: Input Detection and Response