wxpath

wxpath - declarative web graph traversal with XPath NEW: TUI - Interactive terminal interface powered by Textual for testing wxpath expressions and exporting data. Install Requires Python 3.10+. pip install wxpath For TUI support: pip install "wxpathtui" Immediately launch the TUI via uv: uvx...

mec

mec MassExploitConsole Destinado a la explotación masiva Sigue lawiki para comenzar Características Interfaz CLI fácil de usar Ejecuta exploits adaptados con concurrencia a nivel de procesos Exploits integrados automatizados Oculta tu IP usando proxychains4 y proxypool Escaneo de hosts ZoomEye 10...

pillager

Pillager Saquea sistemas de archivos en busca de información sensible con Go. Tabla de Contenidos 1. Resumen 2. Instalación 3. Uso 4. Exfiltración 5. Documentación Resumen Pillager está diseñado para proporcionar un medio sencillo de aprovechar el sólido modelo de concurrencia de Go para buscar...

PortForwarder

Windows TCP Port Forwarder A high-performance TCP port forwarder for Windows with optional IP whitelisting and verbose logging capabilities. Features ✅ Forward TCP traffic from a local port to any remote host:port ✅ Optional IP whitelisting for enhanced security ✅ Port 445 / SMB takeover mode...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

subfinder

Fast passive subdomain enumeration tool. Features • Install • Usage • API Setup • Library • Join Discord subfinder is a subdomain discovery tool that returns valid subdomains for websites, using passive online sources. It has a simple, modular architecture and is optimized for speed. subfinder is...

CVE-2024-6387_Check

This script checks if servers are running a vulnerable version of OpenSSH based on specified targets. It uses threading for concurrent scanning of multiple targets and ports. Installation: git clone https://github.com/sardine-web/CVE-2024-6387Check.git cd CVE-2024-6387Check Usage To check if...

CVE-2025-43529

CVE-2025-43529 TL; DR Apple recently shipped iOS 26.2 and iPadOS 26.2, along with a security advisory that includes fixes for WebKit vulnerabilities. One bug in the DFG JIT compiler CVE-2025-43529 stood out, so I decided to dig into it. The JIT compiler correctly recognized that a Phi node where...

device-pharmer

device-pharmer Concurrently open either Shodan search results, a specified IP, IP range, domain, or list of IPs from a text file and print the status and title of the page if applicable. Add the -u and -p options to attempt to login to the page first looking for a form login and failing that,...

http-mcp-bridge

HTTP MCP Bridge This project implements an HTTP server that acts as a bridge between HTTP/1.1 requests and a remote MCP server, using the mcp python library GitHub. The main purpose of this initiative is to be able to use HTTP security tools to test remote MCP servers using the remote transport...

dcrawl

dcrawl dcrawl is a simple, but smart, multi-threaded web crawler for randomly gathering huge lists of unique domain names. How it works? dcrawl takes one site URL as input and detects all links in the site's body. Each found link is put into the queue. Successively, each queued link is crawled in...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

vulnknox

VulnKnoX VulnKnox es una herramienta de línea de comandos potente escrita en Go que se integra con la API de KNOXSS. Automatiza el proceso de probar URLs en busca de vulnerabilidades de Cross-Site Scripting XSS utilizando las capacidades avanzadas del motor de KNOXSS. Características Soporta...

strutser

strutser This program checks for CVE-2017-5638. Usage Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP requests. default ...

regreSSHion-checker

regreSSHion-checker 📜 Description regreSSHion-checker is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This tool facilitates rapid scanning of multiple IP...

CWFF

CWFF - Listas de palabras personalizadas para fuzzing CWFF es una herramienta que crea una lista de palabras especial de alta calidad para fuzzing/descubrimiento de contenido a la máxima velocidad posible usando concurrencia y está fuertemente inspirada por el Who, What, Where, When, Wordlist...

dirsearch

DirSearch Este software es una implementación en Go del dirsearch tool original escrito por Mauro Soria. DirSearch es la primera herramienta que escribo en Go, principalmente para jugar y experimentar con el modelo de concurrencia de Go, canales, etc. : Propósito DirSearch toma una URL de entrada...

httpgrep

Descripción Una herramienta Python rápida y asíncrona que escanea servidores HTTPS y busca cadenas o patrones regex en cuerpos y cabeceras de respuestas HTTP. Acepta hosts individuales, URLs, rangos CIDR, rangos IP o archivos; escanea múltiples puertos por objetivo único, listas separadas por com...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...