bbot
blacklanternsecurity/bbotThe recursive internet scanner for hackers. 🧡
crawlerdns-analysisemail-harvesting+8
blacklanternsecurity/bbotThe recursive internet scanner for hackers. 🧡
0x09al/iis-raidA native backdoor module for Microsoft IIS (Internet Information Services)
jettchent/scan-for-webcamsscan for webcams on the internet
r4ygm/dorkscoutAutomated Google dork scanner that fetches exploit-db dork lists and scans targets or the entire internet for vulnerable applications, secret files,…
devsecopsdocs/nuclearpondNuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
samhaxr/sxdorkA powerful tool that utilizes the technique of google dorking to search for specific information on the internet.
mercuryworkshop/woefulWoeful is a tool that lets web apps to safely and securely connect to the outside internet without a complex backend.
kingofbugbounty/nuclearpond-ofjaaahNuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.
b1tm4r/cve-2025-29018Proof-of-concept for a stored XSS vulnerability in Code Astro Internet Banking System 2.0.0, demonstrating exploitation via the name parameter in…
b1tm4r/cve-2025-29015Proof-of-concept for a stored XSS vulnerability in Code Astro Internet Banking System 2.0.0, demonstrating session hijacking and client-side attacks…
diegovargasj/cve-2025-32407Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…
ipratheep/cve-2024-56924Proof-of-concept for a Cross-Site Request Forgery (CSRF) vulnerability in code astro Internet Banking System 2.0.0, enabling unauthorized account…
mattia-maria-scivoletto/internet-security-projectAcademic report and LaTeX sources analyzing Maltego vulnerability CVE-2020-24656, an XXE injection enabling data exfiltration, written for an…
ma111e/melodyMelody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulation.
umair9747/genzaiThe IoT security toolkit to help identify IoT related dashboards and scan them for default passwords and vulnerabilities.
juice-shop/juice-shopIntentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…
m1k1o/nekoA self hosted virtual browser that runs in docker and uses WebRTC.
vavkamil/awesome-bugbounty-toolsCurated directory of bug bounty tools organized by category: reconnaissance, subdomain enumeration, port scanning, content discovery, exploitation,…