Tools

tylabs/qs_old

Command line tool for scanning streams within office documents plus xor db attack

inquest/python-inquestlabs

A Pythonic interface and command line tool for interacting with the InQuest Labs API.

devploit/nomore403

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise.…

assetnote/react2shell-scanner

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

michelin/chopchop

YAML-driven CLI scanner that detects exposed services, files, and folders on web endpoints. Designed for developers to integrate security checks into…

logpresso/cve-2021-44228-scanner

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228

wkovacs64/pwned

CLI tool to query the Have I Been Pwned API for breached accounts, pastes, and password exposure, enabling rapid security assessment of compromised…

sapt01/hbsqli

Automated Tool for Testing Header Based Blind SQL Injection

disruptops/cred_scanner

A simple file-based scanner to look for potential AWS access and secret keys in files

hackinglz/saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

rix4uni/cve-2025-55182

A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components.

mohamedation/pwnedcheck

A command-line tool to check if passwords have been exposed in data breaches using the Have I Been Pwned (HIBP) API.

reverseclabs/azuredevops-enum

Read-only Azure DevOps enumeration tool that queries the REST API to surface projects, repositories, service connections, builds, pipeline secrets,…

hackinglz/saas_enum

Command-line tool for discovering SaaS platforms a company uses via DNS enumeration

municipalparkingservices/cve-2021-44228-scanner

Single-binary scanner for CVE-2021-44228 (Log4Shell) that detects vulnerable log4j versions in JAR/WAR/EAR files and applies mitigation patches by…

trinadh465/external_curl_aosp10_r33_cve-2021-22924

Command-line tool and library for transferring data using URL syntax, supporting various protocols including HTTP, FTP, and more.

pikpikcu/nodesub

Nodesub is a command-line tool for finding subdomains in bug bounty programs