📚 Web app for browsing, reading and downloading eBooks stored in a Calibre database

Performing automated scan using Burp Suite Pro & Vmware Burp Rest API

jsleak is a tool to find secret , paths or links in the source code during the recon.

A small command-line utility to artificially limit the input rate to STDIN.

Real-world infosec wordlists, updated regularly

Protect against subdomain takeover

SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.

Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. The tool offers concurrent scanning, allowing users to define …

Black box fuzzer for web applications

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

CVE-2024-3400 Palo Alto OS Command Injection

Security Testing Scripts for JWT

A collection of fascinating and bizarre Censys Search Queries

Rockyou for web fuzzing

Asset inventory of over 800 public bug bounty programs.

Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's your very own discovery side kick, the Dr. Watson to your Sher…