jsluicepp

📄 Table of Contents 👋 Introduction 🛠️ Setup 📝 Usage 📜 Features Monitor URLs Send to Repeater Secrets Secret Notifications Copy URL Positive/Negative Match In-scope only In-line Tags Hide Duplicates Show Parameterized Import/Export Save Settings 🤝 Contributors 👋 Introduction jsluice++ is a Burp...

ivre

IVRE IVRE Instrument de veille sur les réseaux extérieurs or DRUNK Dynamic Recon of UNKnown networks is a network recon framework, including tools for passive and active recon. IVRE can use data from: Passive tools: Zeek Argus Nfdump p0f airodump-ng Active tools: Nmap Masscan ZGrab2 ZDNS Nuclei...

datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

datasploit

Overview of the tool: Performs OSINT on a domain / email / username / phone and find out information from different sources. Correlate and collaborate the results, show them in a consolidated manner. Tries to find out credentials, api-keys, tokens, subdomains, domain history, legacy portals, etc...

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

WEBFANG

WEBFANG v2.0 Disclaimer: Webfang is a CLI developed and engineered as a Reconnaissance toolkit for ethical hackers, blue teamers, and red teamers. It performs passive and active reconnaissance using spidering, Subdomain Scanning, WHOIS, DNS, Shodan, and header fingerprinting. WEBFANG is intended...

burp-ai-agent

Custom AI Agent The bridge between Burp Suite and modern AI. A note on the name: This extension is published as Custom AI Agent formerly Burp AI Agent. It was renamed to comply with PortSwigger's BApp Store naming requirements and to avoid confusion with Burp Suite's built-in Burp AI provider. Th...

w13scan

W13Scan W13scan is an open-source web vulnerability discovery tool based on Python3. It supports active and passive scanning modes and can run on Windows, Linux, and Mac. HTML template source code: w13scan-report Disclaimer Please comply with local laws before using W13Scan. W13Scan is provided f...

burp-text4shell

Text4Shell scanner for Burp Suite Detailed description can be found in our blog post about this plugin. Note about detection capabilities: this plugin will only supply the built-in active scanner with payloads, thus for optimal coverage vs. performance, you'll have to configure your scan properly...

DVWA-ZAP-PENTEST

DVWA Vulnerability Assessment using OWASP ZAP A hands-on web application security assessment of DVWA Damn Vulnerable Web App , performed using OWASP ZAP Zed Attack Proxy 2.17.0. This project documents the full workflow: reconnaissance spidering, automated vulnerability scanning, and analysis of t...

CVE-2026-72898-safe-detection

CVE-2026-72898-safe-detection Simple script to achieve safe and non-destructive active detection of CVE-2026-72898 SQLi in Metabase It attempts to determine if a Metabase instance is vulnerable to the SQL injection vulnerability in the password reset endpoint. The script is designed to be safe an...

Active-Scanning-and-Information-Gathering-in-ICS-SCADA-Networks-Using-Network-Mapper-NMAP

Active Scanning and Information Gathering in ICS/SCADA Networks using Network Mapper NMAP Turkish This research paper has already been published before and you can also find the original .pdf version at here...

jarm

JARM Por favor, lee la publicación inicial del blog sobre JARM para más información. JARM es una herramienta activa de huellas digitales de servidores de seguridad de la capa de transporte TLS. Las huellas digitales de JARM se pueden usar para: Verificar rápidamente que todos los servidores de un...

skipfish

=========================================== skipfish - escáner de seguridad de aplicaciones web http://code.google.com/p/skipfish/ Escrito y mantenido por: Michal Zalewski [email protected] Niels Heinen [email protected] Sebastian Roschke [email protected] Copyright 2009 - 2012...

burp-ai-agent v1.0.0

Custom AI Agent The bridge between Burp Suite and modern AI. A note on the name: This extension is published as Custom AI Agent formerly Burp AI Agent. It was renamed to comply with PortSwigger's BApp Store naming requirements and to avoid confusion with Burp Suite's built-in Burp AI provider. Th...

vulnerabilities handled in SAP Commerce Cloud Data Hub Adapter

SAP has identified a vulnerability in the Data Hub Adapter of SAP Commerce Cloud. An unauthorized malicious actor can exploit this vulnerability to execute arbitrary code. To do this, the malicious actor needs to send network traffic to the Data Hub Adapter. The security company Defused reports...

burp-ai-agent v0.9.2

Custom AI Agent The bridge between Burp Suite and modern AI. A note on the name: This extension is published as Custom AI Agent formerly Burp AI Agent. It was renamed to comply with PortSwigger's BApp Store naming requirements and to avoid confusion with Burp Suite's built-in Burp AI provider. Th...

Lyussfyuring002

lyussfyuring002 web exploitation + OSINT toolkit for people...

CISA Warns of Active Exploitation of Critical Spring4Shell Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added the recently disclosed remote code execution RCE vulnerability affecting the Spring Framework, to its Known Exploited Vulnerabilities Catalog based on "evidence of active exploitation." The critical severity flaw,...

CyberThursday: Asset Inventory, IT-transformation in Cisco, Pentest vs. RedTeam

Two weeks ago I was speaking at a very interesting information security event - CyberThursday. This is a meeting of a closed Information Security practitioners group. The group is about 70 people, mainly from the financial organizations, telecoms and security vendors. These meetings have a rather...