Joseph Thacker

ffufai. AI-powered ffuf wrapper

PIPE. Prompt Injection Primer for Engineers

ffuf_claude_skill. This is a "skill" for claude to use FFUF.

cewlai. ai-based domain name generation

guided-capture. An AI-powered application that conducts structured interviews to create and maintain detailed personal profiles across various life aspects

hero. a hackbot proof-of-concept

metaprompter. Python

ez_finetune. A script that will generate a fine-tuning file for openai's fine-tuning feature

ffuf_presentation. Shell

how-to-exit-nano. Here's how you can exit nano if you find yourself stuck in this terrible application.

toslack. stdin writes to slack

hackersbyrez0. Python

Google-Hacking-Database. Google Hacking Database

svg-cheatsheet. A cheatsheet for exploiting server-side SVG processors.

claude-engineer. Claude Engineer is an interactive command-line interface (CLI) that leverages the power of Anthropic's Claude-3.5-Sonnet model to assist with software development tasks. This tool combines the capabilities of a large language model with practical file system operations and web search functionality.

caido_extension_example. JavaScript

hacks. A collection of hacks and one-off scripts

lemma. Remote CLI tools at your fingertips

python-whatsapp-bot. Build AI WhatsApp Bots with Pure Python

subvertextension. cooking

personality_type_testing. HTML

hydeout. A refreshed version of Hyde for Jekyll 3.x

jsonl-editor. HTML

o365beat. Elastic Beat for fetching and shipping Office 365 audit events

focusmusic.fm. Front end for focusmusic.fm

caido_notes. JavaScript

scratch. Repo with random useful scripts, utilities, prompts and stuff

chrome_hunt. Hunting for chrome extensions!

dfkgrind. Python

webshell. This is a webshell open source project

beats. :tropical_fish: Beats - Lightweight shippers for Elasticsearch & Logstash

data-grep. Extract data from your requests and responses

vimProfiles. various .vimrc files

SecLists. SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

nuclei-templates. Community curated list of templates for the nuclei engine to find security vulnerabilities.

OSCP-note. list of useful commands, shells and notes related to OSCP

templates. Repository to house markdown templates for researchers

mongo-mcp. A mongo db server for the model context protocol (MCP)

pyFilePathPrinter. Python

meg. Fetch many paths for many hosts - without killing the hosts

LFI-files. Wordlist to bruteforce for LFI

fabric. fabric is an open-source framework for augmenting humans using AI. It provides a modular framework for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

stagehand. An AI web browsing framework focused on simplicity and extensibility.

h1passets. List HackerOne private program assets

uro. declutters url lists for crawling/pentesting

rez0security. SCSS

kibana. :bar_chart: Kibana analytics and search dashboard for Elasticsearch

ZetaLib. 🌙 ZetaLib - The only AI Library you need