MapperPlus facilitates the extraction of source code from a collection of targets that have publicly exposed .js.map files.

Sysmon-Like research tool for ETW

Archive Alchemist is a tool for creating specially crafted archives to test extraction vulnerabilities.

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

🚀🤖 Crawl4AI: Open-source LLM Friendly Web Crawler & Scraper. Don't be shy, join here: https://discord.gg/jP8KfhDhyN

Monitor linux processes without root permissions

Autonomous coding agent right in your IDE, capable of creating/editing files, executing commands, using the browser, and more with your permission every step of the way.

aider is AI pair programming in your terminal

HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy‌ + Exploit Timing Attacks

A powerful framework for building realtime voice AI agents 🤖🎙️📹

🔥 The Web Data API for AI - Turn entire websites into LLM-ready markdown or structured data

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

DiceDB is an open-source, fast, reactive, in-memory database optimized for modern hardware.

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

A curated list of awesome resources, tools, and other shiny things for LLM prompt engineering.

The web framework for content-driven websites. ⭐️ Star to support our work!

Crawlee—A web scraping and browser automation library for Node.js to build reliable crawlers. In JavaScript and TypeScript. Extract data for AI, LLMs, RAG, or GPTs. Download HTML, PDF, JPG, PNG, an…

JMX enumeration and attacking tool.

Nuclei AI - Browser Extension for Rapid Nuclei Template Generation

Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.

One place for all the default credentials to assist the Blue/Red teamers identifying devices with default password 🛡️

Pure Go implementation of jq

Community curated list of search queries for various products across multiple search engines.

Jenkins automation server

💀 Don't fear the Reaper 👻

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Real-time HTTP Intrusion Detection

威胁情报播报

TideFinger——指纹识别小工具，汲取整合了多个web指纹库，结合了多种指纹检测方法，让指纹检测更快捷、准确。

A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑