web-security

PDF Files for Pentesting

A command-line utility designed to discover URLs for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicly available.

Web application acceleration, advanced DDoS protection and web security

Open-source attack surface management and authorized security automation platform for asset discovery, service probing, scan orchestration, and security result management.

A Python Hacking Library consisting of network scanner, arp spoofer and detector, dns spoofer, code injector, packet sniffer, network jammer, email sender, downloader, wireless password harvester credential harvester, keylogger, download&execute, ransomware, data harvestors, etc.

A list of all FTP servers in IPv4 that allow anonymous logins.

Fast, security-first headless browser for AI agents. Pure Rust, no Chromium or V8. Built for scraping, web testing, and red teaming, with direct HTTP traffic control and auditable sessions.

:books:Translate the distinct technical blogs. Please star or watch. Welcome to join me.

A tiny web auditor with strong opinions.

结合chrome-devtools-mcp的能力并加上Skill的规范，实现JSRPC+Flask+autoDecoder方案的前端JS逆向自动化分析，提升JS逆向的效率

Caddy module to block or manipulate requests originating from AIs or cloud services trying to train on your websites

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.

Discover new target domains using Content Security Policy