Somdev Sangwan

Most advanced XSS scanner.

Python CLI XSS detection suite that parses page context, generates tailored payloads, fuzzes parameters, and detects WAFs to find reflected and DOM XSS bugs.

Incredibly fast crawler designed for OSINT.

A fast Python web crawler built for OSINT that automatically extracts URLs, email addresses, API keys, JavaScript endpoints, subdomains, and DNS data from a target website.

HTTP parameter discovery suite.

Awesome XSS stuff

roop extension for StableDiffusion web-ui

Face-swapping tool for images and videos that replaced faces in target media with a source photo. Now archived and discontinued by the author due to ethical concerns.

a drop-in replacement for Nmap powered by shodan.io

roadmap for a self-taught hacker

Striker is an offensive information and vulnerability scanner.

Reconnaissance Swiss Army Knife

Crack hashes in seconds.

declutters url lists for crawling/pentesting

CORS Misconfiguration Scanner

Print awesomely in terminals.

Mass scan IPs for vulnerable services

Detect and decode encoded strings, recursively.

Intelligent login bruteforcer.

Extract endpoints from apk files.

An advanced multithreaded admin panel finder written in python.

Blockchain Transactions Investigation Tool

Heuristic Vulnerable Parameter Scanner

Find emails of Github users

CSRF Scanner

Generate Email, Register for anything, Get the OTP/Link

Google Search Scraper

JShell - Get a JavaScript shell with XSS.

Repository for hosting my research papers

Cloak can backdoor any python script with some tricks.

A friend of SQLmap which will do what you always expected from SQLmap.

Nano is a family of PHP web shells which are code golfed for stealth.

detect technologies with wappalyzer alternative

Stuff that doesn't deserves its own repository.

Find subdomains with GPT, for free

find hardcoded strings from source code

Quark is a data visualization framework.

A python module for dumping usable proxies.

Improved DOS exploit for wordpress websites (CVE-2018-6389)

Anti-Automation System

nudity detector that works

DNS caching for humans

Google auto-complete wrapper

HTML form parser for humans.

modern javascript parser

Locky generates "really" strong yet easy to remember passwords.

convert case style of words

Entropy is a (prototype) WAF driven by maths.

golang implementation of fonetic (https://github.com/s0md3v/fonetic)

assess pronounciblity of text

No description.

my personal website

make agents think, thoroughly

No description.

No description.

my default .github files

Mod for Baldur's Gate 3 that adds a Mutant class to the game.