
nuclei
Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

Linux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…


Web vulnerability scanner written in Python3


Source-level debugger for Go with CLI, API, and headless modes; supports breakpoints, variable inspection, and execution tracing for efficient…

Automatic SQL injection and database takeover tool

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Next generation web scanner

The Swiss Army knife for automated Web Application Testing

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

Sample extensions, scripts, and API uses for WinDbg.

A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

A security scanner for your LLM agentic workflows

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…