Mizu

DOMFortify. DOMFortify turns on Trusted Types for a page and quietly takes over the browser's default policy, so that old, vulnerable HTML sinks get auto-sanitized before bad markup ever hits the DOM.

ffffirefox. JavaScript

ssh-keysign-pwn. Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

paperasse. 🇫🇷 Skills pour agents IA spécialisés dans la bureaucratie française : Comptable, Notaire, ...

Livepyre. A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.

OurClaude. TypeScript

vuln-scout. AI-powered whitebox penetration testing plugin for Claude Code. 9 languages, 22 skills, 7 autonomous agents. STRIDE threat modeling, OWASP 2025 coverage, polyglot monorepo support.

rtk. CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

gobypass403. A powerful WAF (HTTP 403/401) and URL parser bypass tool developed in Go, designed to preserve exact URL paths and structures during testing.

riphttp. Rust

uff. unleashed ffuf

mongobleed. JavaScript

React2Shell-CVE-2025-55182-original-poc. Original Proof-of-Concepts for React2Shell CVE-2025-55182

ffuf_claude_skill. This is a "skill" for claude to use FFUF.

caido. 🚀 Caido releases, wiki and roadmap

hacktivity. Disclosures of bugs and vulnerabilities reported by Hacktron.

cai. Cybersecurity AI (CAI), the framework for AI Security

Ebka-Caido-AI. AI-powered assistant that integrates seamlessly with Caido

ShadowBreakers.

singularity. A DNS rebinding attack framework.

Caido403Bypasser. 403Bypasser is a simple plugin that lets you bypass 403 status code by transforming HTTP requests with custom templates.

JsSuite. Real-Time JavaScript reverse engineering and debugging suite - Burp Suite, but for JavaScript

FindOldSIDTraces. A cross-platform tool to find traces of old SIDs remaining in LDAP objects of the Active Directory

Hoster. A fast application to create and manage dynamic content and routes with an administration panel and a secure API

Manticore. A cross platform library to write offensive and defensive security tools in Go

archivealchemist. Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.

jar-poisoner. Replaces every class in a JAR file with a malicious one

BFScan. Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

responder. Easily create and share Proof of Concepts in HTML, JavaScript, etc. with custom headers, all via query parameters

LibreOffice_Tips_Bug_Bounty. Some tips for Bug Bounty using LibreOffice

graphqlextractor. Extract GraphQL operations from javascript

surf. Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

Hippie-OSINT-Toolkit. A web based OSINT ressource and tool

action-octoscan. 📦 :octocat: A GitHub Action that performs a security scan of your GitHub Actions.

laravel-crypto-killer. A tool designed to exploit bad implementations of decryption mechanisms in Laravel applications.

dead-domain-discovery. This Chromium extension scans the page for external iFrames, Scripts, and Styles, logs them to the console, and checks if their domains are resolvable.

MicroBurst. A collection of scripts for assessing Microsoft Azure security

hack-fastjson-1.2.80.

CVE-2024-45409. Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit

CSPBypass. CSPBypass.com, a tool designed to help ethical hackers bypass restrictive Content Security Policies (CSP) and exploit XSS (Cross-Site Scripting) vulnerabilities on sites where injections are blocked by CSPs that only allow certain whitelisted domains.

cupshax. Python

bbot. The recursive internet scanner for hackers. 🧡

chunkloader. A chrome/Firefox extension to retrieve and load react javascript chunks all at once for a wide range of javascript techs

CSPTBurpExtension. CSPT is an open-source Burp Suite extension to find and exploit Client-Side Path Traversal.

CTFNote. CTFNote is a collaborative tool aiming to help CTF teams to organise their work.

MailPermute. Generate email permutations from a name and verify if this email exist with different providers (gmail, duckduckgo, yahoo, yandex)

SSRFmap. Automatic SSRF fuzzer and exploitation tool

smbclient-ng. smbclient-ng, a fast and user friendly way to interact with SMB shares.

eos. Enemies Of Symfony - Debug mode Symfony looter

Slanger-RCE. RCE in Slanger using deserialization of Ruby objects

CVE-2024-4367-PoC. CVE-2024-4367 & CVE-2024-34342 Proof of Concept

reset-tolkien. Unsecure time-based secret exploitation and Sandwich attack implementation Resources

business-ctf-2024. Official writeups for Business CTF 2024: The Vault Of Hope

wconsole_extractor. WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your shell :)

domlogger-configs. Useful configurations for the DomLogger++ extension

initramfs-toolkit. Toolkit that allows to extract and compress initramfs, useful for Linux kernel exploitation.

WU-FCSC2024.

keyhacks. Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.

ldap2json. The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.

HExHTTP. Header Exploitation HTTP

jsluicepp. jsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice

http-garden. Differential testing framework for HTTP implementations

Meta-Owned-IT-Assets. Curated list of Meta (formerly Facebook) owned IT assets

MALVEKE-Flipper-Zero. GAME BOY Tools for Flipper Zero. The perfect companion for your Flipper Zero. Equipped with ESP32-S2 for WiFi. MALVEKE allows you to connect all GAME BOY peripherals and additional accessories such as NRF24, CC1101, and GPS.

BChecks. BChecks collection for Burp Suite Professional and Burp Suite DAST

wafer. Python

pics. File formats dissections and more...

writeups. CTF writeups from The Flat Network Society

PayloadsAllTheThings. A list of useful payloads and bypass for Web Application Security and Pentest/CTF

client-side-prototype-pollution. Prototype Pollution and useful Script Gadgets

wrapwrap. Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.

abuseACL. A python script to automatically list vulnerable Windows ACEs/ACLs.

shovel. Web interface to explore Suricata EVE outputs

write-ups. Write-ups for various CTF

sourcemapper. Extract JavaScript source trees from Sourcemap files

SightQL. Python

snow. Use Snow to finally secure your web app's same origin realms!

chrome_v8_exploit. A collection of 1days and solutions to challenges related to v8/chrome I developed

pyLDAPWordlistHarvester. A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.

my-ctf-challenges. CTF challenges I created 🚩

server-side-prototype-pollution. A collection of Server-Side Prototype Pollution gadgets and exploits

CVE-2023-38831-winrar-exploit. CVE-2023-38831 winrar exploit generator

NoFilter. C

XSS-Bypass-Filters.

libcurl-crlf.

LFIHunt. Advanced Tool To Scan And Exploit Local File Inclusion (LFI) Vulnerabilities

CVE-2023-27372. SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

awesome-flipperzero. 🐬 A collection of awesome resources for the Flipper Zero device.

C_revshell. Basic reverse shell in C using socket() with complete explanation

cry-me. CRY.ME (CRYptographic MEssaging application)

ctf-writeups. CTF write-ups

GeoWordlists. GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.

pypotomux. pypotomux - A python protocol demuxed honeypot (potomiel)

gitGraber. gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...

objectwalker. A python module to explore the object tree to extract paths to interesting objects in memory.

collisions. Hash collisions and exploitations

BurpJSLinkFinder. Burp Extension for a passive scanning JS files for endpoint links.

pp-finder. PP-finder Help you find gadget for prototype pollution exploitation

firefly. Black box fuzzer for web applications

list. The Public Suffix List

xanhunt. A lightweight debian-based docker image that contains all the tools you need to do bugbounty.

Safe-Blob-URL. A Web Platform API proposal for Blob URL

postMessage-tracker. A Chrome Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon

ctf-challenges. Fun CTF (capture the flag) security challenges that I've created

proposal-symbol-proto. TC39 proposal for mitigating prototype pollution

recollapse. REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Kubestroyer. Kubernetes exploitation tool

DOMPurify. DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

FlipperAnimationManager. Visualize and manage your Flipper Zero animations directly from your computer - Flipper Animation Manager

CVE-2022-46169. CVE-2022-46169 Cacti remote_agent.php Unauthenticated Command Injection.

css-exfiltration. HTML

31-days-of-API-Security-Tips. This challenge is Inon Shkedy's 31 days API Security Tips.

katana. A next-generation crawling and spidering framework.

wappaGo. Go

blogs. ✨ Build a beautiful and simple website in literally minutes. Demo at https://beautifuljekyll.com

php_filter_chain_generator. Python

VolWeb. A centralized and enhanced memory analysis platform

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera. 🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337

osgint. OSINT tool to find informations about a github user (email2username, username2email, creation date ...)

AllVideoPocsFromHackerOne. This script grab public report from hacker one and make some folders with poc videos

Awesome-RCE-techniques. Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

windows-coerced-authentication-methods. A list of methods to coerce a windows machine to authenticate to an attacker-controlled machine through a Remote Procedure Call (RPC) with various protocols.

bypass-url-parser. bypass-url-parser

shellcoding-companion. A python script to automatically generate shellcode payload from assembly files.

Moodle-webshell-plugin. A webshell plugin and interactive shell for pentesting a Moodle instance.

CSPass. This tool allows to automatically test for Content Security Policy bypass payloads.

dead-simple-blog. dead-simple blog template powered by Markdown and PHP

writeups. Writeups from our CTFs and more!