m4ll0k (mallok)

SecretFinder. SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

BBTz. BBT - Bug Bounty Tools (examples💡)

Atlas. Quick SQLMap Tamper Suggester

autobreakpointer. Automated JavaScript Debugging Tool using CDP - Automatically sets breakpoints for specified strings/patterns in JavaScript code

Awesome-Bugbounty-Writeups. A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

hacks. A collection of hacks and one-off scripts

OneListForAll. Rockyou for web fuzzing

PayloadsAllThePDFs. PDF Files for Pentesting

GitDorker. A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

dirsearch. Web path scanner

bbscope. Scope gathering tool for HackerOne, Bugcrowd, Intigriti and Immunefi!

PoC-in-GitHub. 📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

gsd-database. Global Security Database

LinkFinder. A python script that finds endpoints in JavaScript files

XSS-Bypass-Filters.

youzai. 基于Golang开发的WEB漏洞扫描器

Holmes. Website FingerPrint Recognition

cve. Gather and update all available and newest CVEs with their PoC.

confused. Tool to check for dependency confusion vulnerabilities in multiple package management systems

reapoc. OpenSource Poc && Vulnerable-Target Storage Box.

gmapsapiscanner. Python

system-prompts-and-models-of-ai-tools. FULL v0, Cursor, Manus, Same.dev, Lovable, Devin, Replit Agent, Windsurf Agent & VSCode Agent (And other Open Sourced) System Prompts, Tools & AI Models.

nowafpls. Burp Plugin to Bypass WAFs through the insertion of Junk Data

hacker0x01.github.io. HTML

HackerzHat. Python

projmem. Drift-aware code memory for AI agents

shhgit. Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

ChatGPT-Micro-Cap-Experiment. This repo powers my blog experiment where ChatGPT manages a real-money micro-cap stock portfolio.

intrigue-core. Discover Your Attack Surface!

fingerprint. 各种工具指纹收集分享

khoj. Your AI second brain. Self-hostable. Get answers from the web or your docs. Build custom agents, schedule automations, do deep research. Turn any online or local LLM into your personal, autonomous AI (gpt, claude, gemini, llama, qwen, mistral). Get started - free.

FingerprintHub. 侦查守卫(ObserverWard)的指纹库

OpenHands. 🙌 OpenHands: Code Less, Make More

n8n. Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.

Immunefi-bug-bounty-writeups-list. curation of all(most) immunefi bug bounty writeups I could find(till now)

gitleaks. Protect and discover secrets using Gitleaks 🔑

http-garden. Differential fuzzing REPL for HTTP implementations.

L1B3RT4S. TOTALLY HARMLESS LIBERATION PROMPTS FOR GOOD LIL AI'S

trufflehog. Find, verify, and analyze leaked credentials

cve-schema. This repository is used for the development of the CVE JSON record format. Releases of the CVE JSON record format will also be published here. This repository is managed by the CVE Quality Working Group.

misp-warninglists. Warning lists to inform users of MISP about potential false-positives or other information in indicators

jaeles-signatures. Default signature for Jaeles Scanner

intrigue-ident. Application and Service Fingerprinting