Popular repositories Loading

1. fast-ParamRecon fast-ParamRecon Public

   Search URLs for parameters to identify specific vulnerabilities "RCE, XSS, SQLI, REDIRECT, LFI, SSRF" Can scan 10 million URLs in under 2 minutes "Based on the OWASP Top 25 Parameters"

   Go

2. surf surf Public

   Forked from assetnote/surf

   Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.

   Go

3. Bypass-Four03 Bypass-Four03 Public

   Forked from nazmul-ethi/Bypass-Four03

   A tool that helps overcome those annoying forbidden 403 errors

   Shell

4. SQL-injection-payloads-bypass-WAF SQL-injection-payloads-bypass-WAF Public

   Wordlist for SQL injection testing Prevents WAF from generating server errors and interrupting the query.

5. react2shell-scanner-RCE-TOOL react2shell-scanner-RCE-TOOL Public

   Forked from assetnote/react2shell-scanner

   High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

   Python