/XNL-h4ck3r

Interceptor. Agent-driven Chrome extension for full browser control via CLI

CaidoReflectorPP. TypeScript

domloggerpp-caido. A Caido plugin to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

webcrack. Deobfuscate obfuscator.io, unminify and unpack bundled javascript

LifeOS. An General Purpose AI Harness for magnifying human capabilities. [CODING, BUILDING, CREATING, BUSINESS, LIFE, WORK, ...]

temodar-agent. Temodar Agent is an AI-powered WordPress plugin and theme security analysis platform built for security researchers, product security teams, auditors, and defenders. It combines AI agent workflows, multi-provider LLM orchestration, Semgrep-powered static analysis, and risk-based WordPress reconnaissance in one local-first Docker application.

damnvulnerableapp. damn this is vulnerable

workflows. 🛠️ Workflows created by the community

secrets-patterns-db. Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

caido-newrequests. A small plugin to filter the http history via hotkey

JSRecon-Buddy. A simple browser extension to quickly find interesting security-related information on a webpage.

FancyTracker. A fancier postMessage tracker with Chrome Manifest version V3 support and a few additional features, inspired by Frans Rosens postmessage tracker.

force-push-scanner. Scan for secrets in dangling commits on GitHub using GH Archive data.

jxscout-vscode. TypeScript

wappalyzer-next. detect technologies with wappalyzer alternative

jxscout. jxscout superpowers JavaScript analysis for security researchers

html-content-extractor. Burp extension to filter HTML elements on the fly with CSS selectors in the HTTP message viewer.

graphqlextractor. Extract GraphQL operations from javascript

httptap. View HTTP/HTTPS requests made by any Linux program

interactsh-collaborator. Burpsuite plugin for Interact.sh

uff. unleashed ffuf

nomore403. 🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

CSPTBurpExtension. CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.

gecko. Chrome extension for automating CSPT discovery

ripey. Tool to query the RIPE database

ReconAIzer. A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

RustScan. 🤖 The Modern Port Scanner 🤖

domlogger-configs. Useful configurations for the DomLogger++ extension

domloggerpp. A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

nowafpls. Burp Plugin to Bypass WAFs through the insertion of Junk Data

Fabric. Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

endpoint_agent. uses crewai to create a list of possible new endpoints from a list of existing endpoints

ai_subdomain. generates unique subdomain names and runs httpx on them

graphqlMaker. Finds graphql queries in javascript files

fallparams. Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

Caduceus. Go

wordlists. 📜 Yet another collection of wordlists

WhoisSimilarityCheck. This tool compares the WHOIS information of domains to identify similarities and determine if they likely belong to the same company

recollapse. REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

dmarc-subdomains. Tool to parse subdomains from dmarc.live

apkd. APK downloader from few sources

hackvertor. Java

cert-sub-go. Cert Sub Go is a tool to query SSL Certificate Transparency for subdomain discovery

AssetViz. AssetViz simplifies the visualization of subdomains from input files, presenting them as a coherent mind map. Ideal for penetration testers and bug bounty hunters conducting reconnaissance, AssetViz provides intuitive insights into domain structures for informed decision-making.

gungnir. CT Log Scanner

guidtool. A tool to inspect and attack version 1 GUIDs

SploitScan. SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.

jsluicepp. jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

shortscan. An IIS short filename enumeration tool

Jira-Lens. Fast and customizable vulnerability scanner For JIRA written in Python

postMessage-tracker-firefox. A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

postMessage-tracker. A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

mapperplus. MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.

repolist. Generate wordlists from Github repositories

CloudRecon. Go

Trufflehog-Chrome-Extension. JavaScript

burpsuite-bambda-filters. Java

RepeaterSearch. This extension adds a search bar to the Repeater tab that can be used to highlight all repeater tabs where the request and/or response matches a query via simple text matching or Regex.

graphquail. Burp Suite extension that offers a toolkit for testing GraphQL endpoints.

wordlistweaver. Quick tool to create custom wordlists like how fuzzers work

heaptruffle. Mine URLs from Browser's Heap Snapshot for fun and profit

chameleon. Rust

bbot. The recursive internet scanner for hackers. 🧡

burp-browser-profiles. Make better use of the embedded browser that comes by default with Burp

github-subdomains. Find subdomains on GitHub.

rmm. Recon MindMap (RMM)

BChecks. BChecks collection for Burp Suite Professional and Burp Suite DAST

scoper. This is a Burp Suite extension that allows users to easily add web addresses to the Burp Suite scope.

SubGPT. Find subdomains with GPT, for free

Arjun. HTTP parameter discovery suite.

uro. declutters url lists for crawling/pentesting

kiterunner. Contextual Content Discovery Tool

ffufPostprocessing. Golang tool which helps dropping the irrelevant entries from your ffuf result file.

HaE. HaE - Highlighter and Extractor, Empower ethical hacker for efficient operations. 赋能白帽，高效作战！

eval_villain. A Firefox Web Extension to improve the discovery of DOM XSS.

xsshunter. SCSS

github-endpoints. Find endpoints on GitHub.

cook. A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.

reconftw. reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities

Flipper-Zero-BadUSB. Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.

trufflehog. Find, verify, and analyze leaked credentials

jwt_tool. :snake: A toolkit for testing, tweaking and cracking JSON Web Tokens

massdns. A high-performance DNS stub resolver for bulk lookups and reconnaissance (subdomain enumeration)

puredns. Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

gotator. Gotator is a tool to generate DNS wordlists through permutations.

can-i-take-over-dns. "Can I take over DNS?" — a list of DNS providers and how to claim vulnerable domains.

dnsx. dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

can-i-take-over-xyz. "Can I take over XYZ?" — a list of services and how to claim (sub)domains with dangling DNS records.

xsshunter-express. An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

katana. A next-generation crawling and spidering framework.

hacks. A collection of hacks and one-off scripts

dalfox. 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

ffuf. Fast web fuzzer written in Go

simplehttpserver. Go alternative of python SimpleHTTPServer

notify. Notify is a Go-based assistance package that enables you to stream the output of several tools (or read from a file) and publish it to a variety of supported platforms.

subfinder. Fast passive subdomain enumeration tool.

amass. In-depth attack surface mapping and asset discovery

fzf. :cherry_blossom: A command-line fuzzy finder

bat. A cat(1) clone with wings.

go-dork. The fastest dork scanner written in Go.

OneListForAll. Rockyou for web fuzzing

bounty-targets-data. This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

rengine. reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with minimal configuration and with the help of reNgine's correlation, it just makes recon effortless.

untrusted-types. Svelte

discordfile. Uploads local files to discord channels.

XSS-Catcher. A blind XSS detection and XSS data capture framework

lazys3. Ruby

clairvoyance. Obtain GraphQL API schema even if the introspection is disabled

inql. InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

source-mapper. A Burp Suite extension for scraping JavaScript source maps.

HolyTips. A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.