a drop-in replacement for Nmap powered by shodan.io

Find subdomains on GitHub.

CT Log Scanner

The recursive internet scanner for hackers. 🧡

Web dashboard for Interactsh client

A tool that recovers the public key used to sign JWT tokens

Tools to assess DNS security.

Tools to assess the DNS security of web applications

Open-source CVE monitoring and alerting platform

Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal & Intelligence X!

A browser extension that allows you to monitor, intercept, and debug JavaScript sinks based on customizable configurations.

A structure-aware HTTP fuzzing library

Adversary Emulation Framework

A minimal, responsive, and feature-rich Jekyll theme for technical writing.

Little Bug Bounty & Hacking Tools⚔️

The Template Injection Table is intended to help during the testing of an application for template injection vulnerabilities.

The Template Injection Playground allows to test a large number of the most relevant template engines for template injection possibilities.

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight different programming languages.

🛠️ Workflows created by the community

EvenBetter is a frontend Caido plugin that makes the Caido experience even better 😎

This repository contains the scanner component for Greenbone Community Edition.

A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

Updated version of the ProtoBurp Extension, with enhanced features and capabilities to encode and fuzz custom protobuf messages

Session Hijacking Visual Exploitation

BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition

A plugin-based scanner that aids security researchers in identifying issues with several CMSs, mainly Drupal & Silverstripe.

Gather and update all available and newest CVEs with their PoC.