Tools for finding SMTP smuggling vulnerabilities.

Reproduce DeFi hacked incidents using Foundry.

HTTP/2 Single Packet Attack low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

gRPC-Web Pentesting Suite + Burp Suite Extension

curation of all(most) immunefi bug bounty writeups I could find(till now)

Machine Learning Course, Sharif University of Technology

🔥 Turn entire websites into LLM-ready markdown or structured data. Scrape, crawl and extract with a single API.

Network Analysis in Python

A collection of smart contract vulnerabilities along with prevention methods

Course Piracy Index 🏴‍☠️

A list of Blockchain Security audit companies, solo auditors and location of public audits.

Tool to find JavaScript files on Websites

a javascript change monitoring tool for bugbounties

Tool to scan for secret files on HTTP servers

Burp Plugin to Bypass WAFs through the insertion of Junk Data

DOM XSS scanner for Single Page Applications

Burp Suite extension that mutates ciphers to bypass TLS-fingerprint based bot detection

Utilities intended for use with Llama models.

A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

Open source API development ecosystem - https://hoppscotch.io (open-source alternative to Postman, Insomnia)

Set of tools to assess and improve LLM security.

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

FastAPI Best Practices and Conventions we used at our startup

This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

Go CLI and Library for quickly mapping organization network ranges using ASN information.

Utility program to perform multiple operations for a given subnet/CIDR ranges.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

Fast passive subdomain enumeration tool.

🔎 Answering Some Question About selfdestruct()