HAHWUL

dalfox. 🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

WebHackersWeapons. ⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

DevSecOps. ♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

XSpear. 🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

MobileHackersWeapons. Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

jwt-hack. JSON Web Token Hack Toolkit

a2sv. Auto Scanning to SSL Vulnerability

authz0. 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

mad-metasploit. Metasploit custom modules, plugins, resource script and.. awesome metasploit collection

droid-hunter. (deprecated) Android application vulnerability analysis and Android pentest tool

metasploit-autopwn. db_autopwn plugin of metasploit

urx. Extracts URLs from OSINT Archives for Security Insights

deadfinder. 🏴‍☠️ Find dead-links (broken links)

RegexPassive. 🔭 Collection of regexp pattern for security passive scanning

mzap. ⚡️ Multiple target ZAP Scanning

hack-pet. 🐰 Managing command snippets for hackers/bug bounty hunters. with pet.

XSS-Payload-without-Anything. XSS Payload without Anything.

s3reverse. The format of various s3 buckets is convert in one format. for bugbounty and security testing.

gee. 🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go

websocket-connection-smuggler. websocket-connection-smuggler

gitls. 🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

ws-smuggler. WebSocket Connection Smuggler

ras-fuzzer. RAS(RAndom Subdomain) Fuzzer

goyo. A simplicity and clean documentation theme

MemBi. All the members of bugbounty and infosec. If you don't know who to follow, see!

xssmaze. XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

backbomb. 💣 Dockerized penetration-testing/bugbounty/app-sec testing environment

hbxss. Security test tool for Blind XSS

action-dalfox. XSS scanning with Dalfox on Github-action

recon-raven. Reconnaissance tool of Penetration test & Bug Bounty

OmniOAST. Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.

assets.hahwul.com. assets for www.hahwul.com

fuzzstone. My fuzz repo!

vais. SWF Vulnerability & Information Scanner

volt. ⚡ Golang library for quick make pentest tools

awesome-oneliner-bugbounty. A collection of awesome one-liner scripts especially for bug bounty tips.

can-i-protect-xss. Everything about xss protection technology

hahwul. about me!

raven. Automation Hacking & Penetration Testing Suite

mcp-hack. MCP(Model Context Protocol) Hack Toolkit

vunlink. Auto Web Vulnerability Scanning Framework

xss-cheatsheet-data. This repository contains all the XSS cheatsheet data to allow contributions from the community.

websocket-connection-smuggling-go. websocket-connection-smuggling write in go

AutoSploit. Automated Mass Exploiter

crawlergo. A powerful browser crawler for web vulnerability scanners

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

zest-env. 🐋 Zest CLI Environment

awesome-zap-extensions. A curated list of amazingly awesome ZAP Extensions

urlgrab. A golang utility to spider through a website searching for additional links.

golang-developer-roadmap. Roadmap to becoming a Go developer in 2020

IntruderPayloads. A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

cyclonedx-cr. A Crystal tool for generating CycloneDX Software Bill of Materials (SBOM) from Crystal shard projects.

homebrew-dalfox. Ruby

hetty. Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.

proxify. Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

heroku-buildpack-firefox. Heroku buildpack for Firefox with geckodriver

rings. Ruby

homebrew-backbomb. backbomb homebrew repository