🛡️ Make your web services secure by default !

DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic

🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

Making Favicon.ico based Recon Great again !

🎯 Fast CORS misconfiguration vulnerabilities scanner

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

java source code static code analysis and danger function identify prog

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.

Security Testing Scripts for JWT

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

🔨 A multiple reverse shell session/client manager via terminal

Python library and CLI for the Bug Bounty Recon API

A Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).

Human and machine readable web vulnerability testing format

A guided mutation-based fuzzer for ML-based Web Application Firewalls

Cross-Site Scripting (XSS) command line tool for testing lists of XSS payloads on web apps.

ChatGPT加持的，多人在线协同信息安全报告编写平台。目前支持的报告类型：渗透测试报告，APP隐私合规报告。