Tools

nightlionsecurity/phpstress

PHP denial of service / stress test for Web Servers running PHP-FPM or PHP-CGI

vijay-shirhatti/rsc-detect-cve-2025-55182

RSC Detect CVE 2025 55182

pxmme/stalker

OSINT tool for automated scanning of social networks and other websites, using a single nickname.

random-robbie/cve-2019-5418

Go-based scanner for CVE-2019-5418 (Ruby on Rails file disclosure) that reads a list of websites and tests for the vulnerability using a burl-derived…

projectdiscovery/subfinder

Fast passive subdomain enumeration tool.

alptexans/rsc-detect-cve-2025-55182

RSC Detect CVE 2025 55182

lcbower33/stegoscan

Automated steganography detection tool that scans websites, web servers, and local directories using AI-driven object/text recognition and deep file…

christophetd/cloudflair

🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

dafthack/powermeta

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing…

aboul3la/sublist3r

Fast subdomains enumeration tool for penetration testers

thewhiteh4t/seeker

Accurately Locate Smartphones using Social Engineering

onionshare/onionshare

Securely and anonymously share files, host websites, and chat with friends using the Tor network

charlie-belmer/nosqli

NoSql Injection CLI tool, for finding vulnerable websites using MongoDB.

robre/jsmon

a javascript change monitoring tool for bugbounties

cyb0r9/config-exploiter

Automated tool to dump config.php files from vulnerable Joomla and WordPress websites using known exploit modules (com_joomanager, revslider).

password123456/autowpscan

Automated WordPress vulnerability scanner that processes multiple sites concurrently using wpscan, analyzes results, and sends summaries via Telegram.