– Bring-Your-Own-Script-Interpreter – Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a …
JA4+ – Suite Of Network Fingerprinting Standards
JA4+ is a suite of network Fingerprinting methods that are easy to use and easy to share. These methods are both …
Gftrace – A Command Line Windows API Tracing Tool For Golang Binaries
A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype …
Galah – An LLM-powered Web Honeypot Using The OpenAI API
TL;DR: Galah (/ɡəˈlɑː/ – pronounced ‘guh-laa’) is an LLM (Large Language Model) powered web honeypot, currently compatible with the OpenAI …
Secbutler – The Perfect Butler For Pentesters, Bug-Bounty Hunters And Security Researchers
Essential utilities for pentester, bug-bounty hunters and security researchers secbutler is a utility tool made for pentesters, bug-bounty hunters and …
Navgix – A Multi-Threaded Golang Tool That Will Check For Nginx Alias Traversal Vulnerabilities
navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques …
CloudRecon – Finding assets from certificates
Finding assets from certificates! Scan the web! Tool presented @DEFCON 31 ** You must have CGO enabled, and may have …
EasyEASM – Zero-dollar Attack Surface Management Tool
Description Easy EASM is just that… the easiest to set-up tool to give your organization visibility into its external facing …
DorXNG – Next Generation DorX. Built By Dorks, For Dorks
DorXNG is a modern solution for harvesting OSINT data using advanced search engine operators through multiple upstream search providers. On …
EndExt – Go Tool For Extracting All The Possible Endpoints From The JS Files
EndExt is a .go tool for extracting all the possible endpoints from the JS files When you crawll all the …