Tools

ghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

perplext/echteeteepee

Go tool and Nuclei template for testing James Kettle's (CVE-2025-32094) HTTP/1.1 must die: the desync endgame

portswigger/turbo-intruder

High-speed Burp Suite extension for sending large volumes of HTTP requests with a custom stack, Python-based attack configuration, and advanced…

redteampentesting/monsoon

Fast HTTP enumerator

jackieya/vitevulscan

针对CVE-2025-30208和CVE-2025-31125的漏洞利用

trailofbits/gosentry

Security-oriented Go toolchain, focused on state-of-the-art fuzzing capabilities.

dzonerzy/gowapt

Go Web Application Penetration Test

moopinger/smugglefuzz

A rapid HTTP downgrade smuggling scanner written in Go.

ffuf/ffuf

Fast web fuzzer written in Go

vavkamil/awesome-bugbounty-tools

Curated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…

0xsobky/hackvault

A container repository for my public web hacks!

0vercl0k/wtf

Distributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.

ayoubfathi/leaky-paths

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could…

doyensec/regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

rub-nds/ws-attacker

WS-Attacker is a modular framework for web services penetration testing. It is developed by the Chair of Network and Data Security, Ruhr University…

jesusprubio/bluebox

A collection of exploits for different VoIP products.