portswigger/active-scan-plus-plusBurp Suite extension that extends active and passive scanning with checks for host header attacks, XXE, code injection, and known CVEs like…
jankoboy88/higernesa passive OSINT toolkit in python - usernames, emails, domains, ips, phones, hashes. no keys, no logins.
vqkro/higernesa passive OSINT toolkit in python usernames, emails, domains, ips, phones, hashes. no keys, no logins.
ankhcorp/nuke.shBash-based passive reconnaissance + attack surface mapping script using only public APIs + stock Linux tools (curl, dig, openssl, nmap, python3).
anoxhunterdump-ctrl/cve-2026-103752-authorizer-privilege-escalationDefensive analysis, patch breakdown, and passive detection scanner for CVE-2026-103752 (WordPress Authorizer Plugin <= 3.15.3).
vighnesh91/securiscanStandard-library Python security triage engine that scans web apps, APIs, LLMs, and mobile packages via passive header inspection, active canary…
mmarting/unwafGo tool that passively discovers the real origin IP behind a WAF/CDN using multiple OSINT sources, then verifies candidates via HTML similarity, SSL…
i3it/cve-2026-18322Root-cause analysis, passive version checker, and lab PoC for CVE-2026-18322, an unauthenticated privilege escalation in the Smart Popup by Supsystic…
johenlastgen-jlg/cve-2026-18351Mass exploit tool for CVE-2026-18351, an unauthenticated arbitrary file upload to RCE in Elementor Forms <= 1.6.0, with passive probing, shell…
hackersroot/cve-2026-76581-detectorSafe passive detector for identifying WPMU DEV Dashboard versions affected by CVE-2026-76581.
ridpath/terrminus-cve-2026-2406AsyncIO Scanner & Exploitation Framework for CVE-2026-24061 (Telnet NEW_ENVIRON Auth Bypass). Features high-concurrency discovery, passive…
rav1010/cve-2026-27636Passive reconnaissance and fingerprinting tool for detecting FreeScout deployments and analyzing exposure related to CVE-2026-28289, aiding…
cybrdude/cve-2026-1731-scannerPassive vulnerability scanner for CVE-2026-1731 — BeyondTrust RS/PRA pre-auth RCE (CVSS 9.9). Educational & defensive use only.
abrahamsurf/sdwan-scanner-cve-2026-20127Cisco SD-WAN Exposure & Potential Vulnerability Scanner (Passive Fingerprinting) 2026
wattocyber/vegadnsRust-based DNS enumeration and subdomain discovery tool for reconnaissance and penetration testing security assessments.
yora1928/cve-2026-48908-by-yoraPassive security checker for CVE-2026-48908 affecting SP Page Builder.
bugcrowd/huntFlags parameters commonly associated with injection, SSRF, path traversal, IDOR, and SSTI, via passive Burp/ZAP scanning; also organizes manual…
0x999-x/jsluiceppjsluice++ is a Burp Suite extension designed for passive and active scanning of JavaScript traffic using the CLI tool jsluice
