Scrape domain names from SSL certificates of arbitrary hosts

Generates combination of domain names from the provided input.

Extract URLs, paths, secrets, and other interesting bits from JavaScript

E-mails, subdomains and names Harvester - OSINT

Fast and customizable subdomain wordlist generator using DSL

Enumeration sub domains(枚举子域名)

A tool for adding new lines to files, skipping duplicates

HostHunter a recon tool for discovering hostnames using OSINT techniques.

Tool to check for dependency confusion vulnerabilities in multiple package management systems

ssrf、ssrfIntranetFuzz、dnsRebinding、recordEncode、dnsPoisoning、Support ipv4/ipv6

A simple HTTP proxy that fogs over naughty URLs

Manage any layer-7 protocols in a Service Mesh.

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

The scanner helps to scan misconfigured reverse proxy servers and misconfigured forward proxy servers

Make arbitrary applications to use a specified SOCKS / HTTP proxy

一个高价值漏洞采集与推送服务 | collect valueable vulnerability and push it

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

GraalVM compiles Java applications into native executables that start instantly, scale fast, and use fewer compute resources 🚀

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.

The flexible backend for all your projects 🐰 Turn your DB into a headless CMS, admin panels, or apps with a custom UI, instant APIs, auth & more.

CaptainHook Tweak、Logos Tweak and Command-line Tool、Patch iOS Apps, Without Jailbreak.

APIKit：Discovery, Scan and Audit APIs Toolkit All In One.

An MS Sharepoint and Frontpage Auditing Tool

Markdown parser, done right. 100% CommonMark support, extensions, syntax plugins & high speed

〰️ Overview of the open source code for Wire

Deploy web apps anywhere.

Burp被动扫描流量转发插件

Extract and decrypt browser data, supporting multiple data types, runnable on various operating systems (macOS, Windows, Linux).

seclists with additional stuff