HAHWUL

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

A hybrid static and AI-driven analyzer that detects every endpoint in your codebase, from shadow APIs to standard routes.

JSON Web Token Hack Toolkit

Hwaro (화로) is a lightweight and fast Static Site Generator(SSG) written in Crystal.

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

Auto Scanning to SSL Vulnerability

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection

(deprecated) Android application vulnerability analysis and Android pentest tool

db_autopwn plugin of metasploit

Extracts URLs from OSINT Archives for Security Insights

🏴‍☠️ Find dead-links (broken links)

Rust-powered HTTP Request Smuggling Scanner.

🔭 Collection of regexp pattern for security passive scanning

⚡️ Multiple target ZAP Scanning

🐰 Managing command snippets for hackers/bug bounty hunters. with pet.

XSS Payload without Anything.

The format of various s3 buckets is convert in one format. for bugbounty and security testing.

🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go

websocket-connection-smuggler

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

WebSocket Connection Smuggler

RAS(RAndom Subdomain) Fuzzer

A simplicity and clean documentation theme

All the members of bugbounty and infosec. If you don't know who to follow, see!

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

💣 Dockerized penetration-testing/bugbounty/app-sec testing environment

Security test tool for Blind XSS

Reconnaissance tool of Penetration test & Bug Bounty

XSS scanning with Dalfox on Github-action

Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.

assets for www.hahwul.com

My fuzz repo!

SWF Vulnerability & Information Scanner

⚡ Golang library for quick make pentest tools

A collection of awesome one-liner scripts especially for bug bounty tips.

Everything about xss protection technology

Multi-terminal plugin for Caido with AI presets and instant Cmd+J access

about me!

Hex Viewer & Editor Plugin for Caido

Automation Hacking & Penetration Testing Suite

Auto Web Vulnerability Scanning Framework

MCP(Model Context Protocol) Hack Toolkit

This repository contains all the XSS cheatsheet data to allow contributions from the community.

A powerful browser crawler for web vulnerability scanners

Automated Mass Exploiter

websocket-connection-smuggling write in go

🐋 Zest CLI Environment

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Web for security engineer & hacker

A golang utility to spider through a website searching for additional links.

Roadmap to becoming a Go developer in 2020

A curated list of amazingly awesome ZAP Extensions

Endless Options, Your Chain

No description.

OpenVAS Scanner Install Script on Debian

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

No description.

No description.

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.

A Crystal tool for generating CycloneDX Software Bill of Materials (SBOM) from Crystal shard projects.

BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.

This repo is a sample repo for Github Action Injection.

for dalfox

Live OS for Physical hacking

Swiss Army knife Proxy tool for HTTP/HTTPS traffic capture, manipulation, and replay on the go.

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

No description.

No description.

A Ruby Implementation and Library for Easy Utilization of ZAP API

Jekyll plugin for security.txt

exploit-db(edb) convert to dokuwiki template

zap(zed attack proxy) daemon mode buildpack of heroku

Vulnerability analysis to javascript using javascript and web debugger

Web Application Security Scanner Framework

install nmap and set alias buildpack of heroku

Easy testing from multiple android devices

A collection of ZAP scripts provided by the community - pull requests very welcome!

quick setup openvpn

No description.

A power-user CLI for the Jules API, written in Crystal.

No description.

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

A comprehensive security checklist for MCP-based AI tools. Built by SlowMist to safeguard LLM plugin ecosystems.

No description.

A collection of awesome Zola resources

tool, page code for https://www.hahwul.com

No description.

No description.

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

In-depth Attack Surface Mapping and Asset Discovery

Put your directories on the cutting board

<video><embed><object><meta><body><script><frame><frameset>

ProjectSend_r582_webshell exploit

No description.

🍻 Default formulae for the missing package manager for macOS (or Linux)

No description.

Crystal bindings for Apple's FoundationModels.framework

Caido implementation for crystal

An unofficial Crystal implementation of the Agent Client Protocol (ACP)

No description.

Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.

It is a Caido theme made to feel blue, the representative Midnight color of Seoul.

Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

go get error patched version

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

No description.

Lens - The way the world runs Kubernetes

No description.

The OWASP ZAP core project

custom scheme testing tool with checklist

Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.

Heroku geckodriver buildpack for Selenium use with Firefox

OWASP Foundation Web Respository

OpenVEX (Vulnerability Exploitability eXchange) implementation for Crystal

Security vulnerability scanner for Crystal shard dependencies.

No description.

No description.

No description.

No description.

No description.

No description.

No description.

No description.

lab.hahwul.com

No description.

No description.

No description.

OWASP Community Pages are a place where OWASP can accept community contributions for security-related content.

Creates the templates section to be used in Zola doc site

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Homebrew tap for xssmaze — Intentionally vulnerable XSS testing lab

Homebrew tap for shards-audit — Crystal shard dependency vulnerability auditor

The BOAST Outpost for AppSec Testing: a server designed to receive and report Out-of-Band Application Security Testing (OAST) reactions.

ZAP implementation for crystal

No description.

No description.

📚 Community guides for open source creators

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

No description.

Crybot - Crystal-based Personal AI Assistant with z.ai GLM support, tool calling, and Telegram integration

A curated list of static web site generators.

No description.

Artwork for all official ZAP swag - posters, stickers, t-shirts etc

No description.

🚂 🦀 The one-person framework for Rust for side-projects and startups

:octocat: Improve your README.md profile with these amazing badges.

An OOB interaction gathering server and client library

Documentation for Amber Framework

crystal-lang.org website

Standard Go Project Layout

No description.

No description.

🍮 Minimalistic API for writing text-based user interfaces in pure Crystal

No description.

No description.

Data and schema powering the worlds largest collection of SBOM/xBOM products, projects, and services

A protocol for connecting any editor to any agent

No description.

Static Site Generator Benchmarks

No description.

HTTP benchmarking tool written in Crystal

🔗 Source for the Caido plugin store

The shard catalog for shardbox.org

No description.

:gem: A collection of awesome Crystal libraries, tools, frameworks and software

Implementation of Jinja2 template language in Crystal

aaa

AI agents running research on single-GPU nanochat training automatically

Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.

:green_heart: Emoji for Crystal

A comprehensive pure-Crystal image processing library with no external dependencies

The Crystal Programming Language

Customize your Caido colors!

The official Jamstack site

Yet another markdown parser, Compliant to CommonMark specification, written in Crystal.

No description.

The Campsite monorepo

Badges for your personal developer branding, profile, and projects.

No description.

⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.

No description.

A fast static site generator in a single binary with everything built-in. https://www.getzola.org

A plugin for collaboration in Caido

directory of llms.txt file in the wild

Caido plugin for grid-based authorization testing across multiple users and roles

Workflows created by the community

Heroicons as a liquid tag for Jekyll.

💎 A collection of awesome Ruby libraries, tools, frameworks and software

A comment system powered by GitHub Discussions. :octocat: :speech_balloon: :gem:

No description.

📙 Caido documentation

🔗 A curated list of awesome Caido related projects

A database-backed ActiveSupport::Cache::Store

A curated list of awesome things related to Ruby on Rails

Multithreaded, Postgres-based, Active Job backend for Ruby on Rails.