Jean-Marie R

databasement. Self-hosted database backup manager with a web UI. Schedule, backup, and restore MySQL, PostgreSQL, MariaDB, Microsoft SQL Server, MongoDB, SQLite & Redis to S3, SFTP, Samba or local storage. SSH Tunnel support.

cc-vuln-researcher. Python

claude-code-deepseek. Run Claude Code CLI with DeepSeek API — cheap high-volume automation for security research & bug bounty

hackingtool. ALL IN ONE Hacking Tool For Hackers

Nginx-Rift. NGINX RCE exploits

sherlock. Hunt down social media accounts by username across social networks

Notes.

beszel. Lightweight server monitoring with historical data, docker stats, and alerts.

Wallos. Wallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.

payloads_flipperZero. Collection of Payloads BadUSB for Flipper Zero with DuckyScript 1.0

malicious_extension_sentry. Malicious Extension Database

awesome. 😎 Awesome lists about all kinds of interesting topics

awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources

cli. Tool to help automate adding contributor acknowledgements according to the all-contributors specification ✨

devops-directive-kubernetes-course. This is the companion repo for the DevOps Directive "Kubernetes: Beginner to Pro" course!

unwaf. Unwaf is a Go tool designed to help identify WAF bypasses using passive techniques. It automates the process of discovering the real origin IP behind a WAF/CDN by combining multiple discovery methods and verifying candidates through HTML similarity comparison, SSL certificate fingerprinting, and HTTP header analysis.

redamon. An AI-powered agentic red team framework that automates offensive security operations, from reconnaissance to exploitation to post-exploitation, with zero human intervention.

Threat-Hunting. Threat Hunting queries of multiple platforms

EpsteOut. See which of your LinkedIn connections appear in the Epstein files.

mitmrouter. Bash script to automate setup of Linux router useful for IoT device traffic analysis and SSL mitm

awesome-selfhosted. A list of Free Software network services and web applications which can be hosted on your own servers

CeWL. CeWL is a Custom Word List Generator

GOAD. game of active directory

vulnerability-Checklist. This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter

xsshunter-express. An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

fluxion. Unified Vulnerability Intelligence Platform

katana. A next-generation crawling and spidering framework.

dozzle. Realtime log viewer for containers. Supports Docker, Swarm and K8s.

awesome-security. A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

react2shell-scanner. High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

web-check. 🕵️‍♂️ All-in-one OSINT tool for analysing any website

no-as-a-service. No-as-a-Service (NaaS) is a simple API that returns a random rejection reason. Use it when you need a realistic excuse, a fun “no,” or want to simulate being turned down in style.

vulnx. Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

JSONBee. A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

bounty-targets-data. This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

s3dns. Find S3 AWS/GCP/Azure buckets while surfing. S3DNS acts as DNS server, follows CNAMEs and matches any bucket pattern

Dynamic-Path-Traversal-Tester. Python

firecrawl. The API to search, scrape, and interact with the web at scale. 🔥

rec0n. A fully automated subdomain reconnaissance and sensitive data discovery toolkit.

One-Liner-OSINT. One Liner OSINT is a collection of powerful one-liner commands for Open-Source Intelligence (OSINT) gathering.

4-ZERO-3. 403/401 Bypass Methods + Bash Automation + Your Support ;)