gofuzz. Python
174vps_setup. Auto deployment of my VPS
100servicelens. ServiceLens is a Python tool for analyzing services linked to Microsoft 365 domains. It scans DNS records like SPF and DMARC to identify services, categorizing them into Email, Cloud, Security, and more.
78ChromeAudit. Nuclei plugins to audit Chrome extensions
66netscan. NetScan CLI is a command-line tool for retrieving and analyzing IP address information. It provides detailed subnet and organization data for given IP addresses using various online services.
62Internal_Pentest. Scripts that automate portions of pentests.
59reverse-apk. Python
56trust-validator. Validates priv escalation of AD trusts
47vulnseer. VulnSeer combines the power of Nmap's service detection with multiple AI providers to deliver intelligent vulnerability assessments. Unlike traditional scanners that rely on static databases, VulnSeer leverages AI to provide contextual analysis of discovered services and their potential security risks.
43Sir-Reginald-Buys-The-Dips. A frightfully intelligent algorithmic trading automaton of noble birth. Sir Reginald's prime directive: to acquire undervalued assets post-haste. Tally-ho, to the moon!
43FFUF-Workflow-Tool. This tool automates the process of running FFUF (Fuzz Faster U Fool) and post-processing its results to extract valid URLs. It supports both direct file input and piped input for wordlists.
36paramhunter. Looks for parameters in urls
35Cognitohunter. A powerful AWS Cognito analysis and session hijacking toolkit designed for security researchers and penetration testers. CognitoHunter specializes in dissecting AWS Cognito implementations and performing advanced credential-to-session conversions.
21pci-segtest. A network segmentation and egress control testing tool for PCI DSS v4.0 compliance. Automatically discovers network segments, validates isolation between environments, and identifies potential data exfiltration channels. Designed for security teams to perform thorough and efficient compliance validation of cardholder data environments.
14discover. Easy discovery of assets
13Kali-Install-Script. A custom script I created because I got tired of installing my tools manually!
13Project-X. Reconnaisance Tool
12virtual-host-scanner. A Python tool to enumerate virtual hosts on a web server by sending HTTP requests with different host headers and analyzing the responses.
9misconfigmate. This tool builds upon their excellent research and service templates while adding additional features and improvements.
6SigSentry. Advanced Wi-Fi and Bluetooth Signal Monitoring Tool
5pst-security-scanner. Python
5Azure-Serverless-Function-with-API-Management-Automation. HCL
4PDF-Security-Testing-Tool. A comprehensive security testing tool for PDF processing services and viewers. This tool generates PDF files containing various security test payloads to help identify potential vulnerabilities in PDF processing systems.
4LLM-Stock-Analyzer. A Python-based tool to analyze stock performance and provide insights using historical data, technical indicators, and market trends. The tool fetches data for a given stock ticker using the Yahoo Finance API (`yfinance`) and generates a comprehensive analysis report using a custom AI model (`ollama`).
4ai-trading-assistant. AI-driven stock trading system designed to provide intelligent, data-driven trading
3relaytoolkit. Comprehensive relay tool
3CommodityAnalyzer. Python
2Gau-Scanner. Shell
2auto_internal. For when I want Domain Admin, but don't feel like typing.
1nullenc0de.github.io. HTML
1teamlinux. Teamviewer install for Linux
1DomainHunter. Python
1massbypass. is a powerful tool for automating the discovery of access control bypasses by exploiting RFC 3986 edge cases and implementation flaws. It targets endpoints that return 401, 403, 404, or authentication redirects, and attempts to bypass these restrictions using a comprehensive suite of URL manipulation techniques.
1