yaelwrites/big-ass-data-broker-opt-out-listCurated, community-maintained directory of data broker opt-out instructions to help individuals remove personal information from people-search sites…
firefart/hijaggerChecks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
projectdiscovery/subfinderFast passive subdomain enumeration tool.
neo23x0/muninOnline hash checker for Virustotal and other services
cyeezy08/kimai-cve-2026-49865-pocPoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
xcapri/subdosecFast, accurate subdomain takeover scanner with zero false positives. Detects vulnerable subdomains, collects metadata (IP, CNAME, title, status…
vulnerscom/getsploitSearch and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
error-inside/cve-2025-10897WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read
xaanziu/cve-2026-5513CVE-2026-5513: Bookly <= 27.2 Stored XSS via Cookie (Unauthenticated)
jenderal92/reverse_ip_multithreading1Multithreaded reverse IP lookup tool for discovering domains hosted on the same IP address.
s_r_e_e_r_a_j/ipghostIPGhost is a strong tool for ethical hackers. This tool automatically changes your IP address , making it hard for anyone to track your online…
joda32/certcrunchyJust a silly recon tool that uses data from SSL Certificates to find potential host names
xmyronn/cve-2026-7071-access-controlProof of concept demonstrating unauthenticated access to user resumes via directory listing in CodeAstro Online Job Portal, with reproduction steps…
storenth/lazyreconWicked sick v2.0 script is intended to automate your reconnaissance process in an organized fashion.
sobri3195/pegasus-neoPEGASUS-NEO is a comprehensive penetration testing framework designed for security professionals and ethical hackers. It combines multiple security…
narimangharib/irgc-whatsapp-phishkitAnalysis of state-sponsored WhatsApp phishing infrastructure with real-time QR hijacking and device surveillance
matthewwiese/hinge-command-control-c2A proof of concept demonstrating how to use the Hinge dating app as a C2.
