JSAnalyzer

JS Analyzer - Burp Suite Extension by Jensec https://x.com/jensec A powerful Burp Suite extension for JavaScript static analysis. Extracts API endpoints, URLs, secrets, and email addresses from JavaScript files with intelligent noise filtering. The goal is reduce noise as much as possible to ensu...

CVE-2025-8088-Winrar

CVE-2025-8088 WinRAR Exploitation Advanced WinRAR Path Traversal Exploitation Tool A sophisticated GUI tool for creating malicious RAR files that exploit the WinRAR path traversal vulnerability CVE-2025-8088 by manipulating ADS and RAR5 headers. Features ADS Exploitation - NTFS alternate data...

turbinia

Turbinia Summary Note: Turbinia will not develop new features anymore and is in maintenance mode. Users should have a look atOpenRelik. Turbinia is an open-source framework for deploying, managing, and running distributed forensic workloads. It is intended to automate running of common forensic...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure CVE-2025-14847 , dubbed MongoBleed , allows unauthenticated remote attackers to exfiltrate uninitialised heap memory by exploiting MongoDB's zlib decompression logic. This...

penta

penta PENTest + semi-Automation tool Penta is is Pentest semi-automation tool using Python3. It provides advanced features to extract vuln info found on specific servers. I'm now developing a scanning system using vuln-db. Installation Install requirements penta requires the following packages...

Macrome

Macrome An Excel Macro Document Reader/Writer for Red Teamers & Analysts. Blog posts describing what this tool actually does can be found here and here. Installation / Building Clone or download this repository, the tool can then be executed using dotnet - for example: dotnet run -- build...

PsMapExec

PsMapExec 🚀 What is PsMapExec? PsMapExec is a PowerShell-based post-exploitation framework, heavily inspired by the well-known CrackMapExec / NetExec tools. It brings the familiar looks and function of these tools to native PowerShell with its own arsenal of improvements. This tool is designed to...

PEzor

PEzor Read the blog posts here: https://iwantmore.pizza/posts/PEzor.html https://iwantmore.pizza/posts/PEzor2.html https://iwantmore.pizza/posts/PEzor3.html https://iwantmore.pizza/posts/PEzor4.html ---------------- \ / \ //\ \ |/| / // \ /0 0 \ / // | \ \ / / // // | \ \ @^@'/ / // | \ \ //^/...

rustnet

English | 简体中文 | 日本語 RustNet is a terminal network monitor that shows live TCP, UDP, and QUIC connections with process attribution when available. It runs on Linux, macOS, Windows, and FreeBSD. Install On macOS or Linux with Homebrew: brew install rustnet Packet capture needs platform-specific...

JWTXposer

JWTXposer Automated JWT Discovery & Analysis Tool for Bug Bounty Hunters and Red Teamers What Is JWTXposer? JWTXposer is an automated reconnaissance tool that scans public archives like the Wayback Machine , extracts leaked JWT tokens , and decodes them to identify potentially exploitable...

chepy

Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...

URS

/\ /\ /'/',\ \ \ \ \ \ //, \ \ /\ \// // // // U niversal R eddit S craper - A comprehensive Reddit scraping command-line tool written in Python. codecov releases Sponsors If this project has saved you time, consider sponsoring its development. | MangoProxy provides residential, ISP,...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. !TIP New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilities on every pull request and block insecure cod...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

HandleKatz

HandleKatz This tool was implemented as part of our Brucon2021 conference talk and demonstrates the usage of cloned handles to Lsass in order to create an obfuscated memory dump of the same. It compiles down to an executable living fully in its text segment. Thus, the extracted .text segment of t...

CVE-2026-29000

CVE-2026-29000: pac4j JWT Authentication Bypass PoC Proof of Concept for CVE-2026-29000 - A critical authentication bypass vulnerability in pac4j JWT implementation that allows attackers to forge admin tokens without a valid signature. ⚠️ DISCLAIMER This tool is provided for educational and...

threadtear

Threadtear Threadtear is a multifunctional deobfuscation tool for java. Android application support is coming soon Currently working on a dalvik to java converter. Suitable for easier code analysis without worrying too much about obfuscation. Even the most expensive obfuscators like ZKM or String...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

raptor

╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══██╗ ║ ║ ██║ ██║█...