hahwul's Repositories

Auto Scanning to SSL Vulnerability

⭐ 633 🌐 Public 📦 Archived

action-authz0-test

⭐ 2 🌐 Public

XSS scanning with Dalfox on Github-action

⭐ 26 🌐 Public

In-depth Attack Surface Mapping and Asset Discovery

⭐ 4 🌐 Public

Web Application Security Scanner Framework

⭐ 4 🌐 Public

⭐ 0 🌐 Public

assets.hahwul.com

assets for www.hahwul.com

⭐ 23 🌐 Public

Caido plugin for grid-based authorization testing across multiple users and roles

⭐ 0 🌐 Public

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

⭐ 425 🌐 Public

Automated Mass Exploiter

⭐ 9 🌐 Public

🔗 A curated list of awesome Caido related projects

⭐ 0 🌐 Public

awesome-crystal

:gem: A collection of awesome Crystal libraries, tools, frameworks and software

⭐ 0 🌐 Public

Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)

⭐ 3 🌐 Public

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

⭐ 15 🌐 Public

A curated list of awesome things related to Ruby on Rails

⭐ 0 🌐 Public

💎 A collection of awesome Ruby libraries, tools, frameworks and software

⭐ 0 🌐 Public

awesome-zap-extensions

A curated list of amazingly awesome ZAP Extensions

⭐ 8 🌐 Public

A collection of awesome Zola resources

⭐ 3 🌐 Public

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

⭐ 6 🌐 Public

💣 Dockerized penetration-testing/bugbounty/app-sec testing environment

⭐ 33 🌐 Public 📦 Archived

bad-usb-scripts

⭐ 1 🌐 Public

Badges4-README.md-Profile

:octocat: Improve your README.md profile with these amazing badges.

⭐ 1 🌐 Public

BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.

⭐ 5 🌐 Public

The BOAST Outpost for AppSec Testing: a server designed to receive and report Out-of-Band Application Security Testing (OAST) reactions.

⭐ 0 🌐 Public

Vulnerability analysis to javascript using javascript and web debugger

⭐ 4 🌐 Public 📦 Archived

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/etc) that are eligible for reports

⭐ 4 🌐 Public

install nmap and set alias buildpack of heroku

⭐ 5 🌐 Public

buildpack-zap-daemon

zap(zed attack proxy) daemon mode buildpack of heroku

⭐ 4 🌐 Public

This project EXTENDS BurpLoader's license. It is NOT intended to replace BurpLoader.

⭐ 2 🌐 Public

Caido implementation for crystal

⭐ 2 🌐 Public

Customize your Caido colors!

⭐ 0 🌐 Public

⭐ 4 🌐 Public 📦 Archived

The Campsite monorepo

⭐ 0 🌐 Public

can-i-protect-xss

Everything about xss protection technology

⭐ 14 🌐 Public

chei-l.github.io

⭐ 0 🌐 Public

community-scripts

A collection of ZAP scripts provided by the community - pull requests very welcome!

⭐ 5 🌐 Public

A powerful browser crawler for web vulnerability scanners

⭐ 9 🌐 Public

crystal-smuggle

⭐ 3 🌐 Public

crystal-website

crystal-lang.org website

⭐ 1 🌐 Public

Given a list of hosts, this small utility fetches all whitelisted domains from the hosts' CSPs.

⭐ 3 🌐 Public

⭐ 2 🌐 Public

Live OS for Physical hacking

⭐ 6 🌐 Public 📦 Archived

A Crystal tool for generating CycloneDX Software Bill of Materials (SBOM) from Crystal shard projects.

⭐ 4 🌐 Public

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

⭐ 4744 🌐 Public

🏴‍☠️ Find dead-links (broken links)

⭐ 155 🌐 Public

deadfinder-action-test

⭐ 1 🌐 Public

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

⭐ 2055 🌐 Public

DNSProb is a tool built on top of retryabledns that allows you to perform multiple dns queries of your choice with a list of user supplied resolvers.

⭐ 3 🌐 Public

Documentation for Amber Framework

⭐ 1 🌐 Public

📙 Caido documentation

⭐ 0 🌐 Public

(deprecated) Android application vulnerability analysis and Android pentest tool

⭐ 293 🌐 Public 📦 Archived

A plugin for collaboration in Caido

⭐ 0 🌐 Public

Encoding Only Your Choices

⭐ 6 🌐 Public

exploit-db_to_dokuwiki

exploit-db(edb) convert to dokuwiki template

⭐ 4 🌐 Public

eyeballer.pytorch

⭐ 1 🌐 Public

Automated tool for patching APKs to enable the use of Frida gadget by downloading the library and injecting code into the main activity.

⭐ 1 🌐 Public

simple copy to file to clipboard

⭐ 3 🌐 Public

⭐ 22 🌐 Public

geckodriver-buildpack

Heroku geckodriver buildpack for Selenium use with Firefox

⭐ 3 🌐 Public

🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go

⭐ 85 🌐 Public

gh-test-crystal

⭐ 0 🌐 Public

⭐ 0 🌐 Public

A comment system powered by GitHub Discussions. :octocat: :speech_balloon: :gem:

⭐ 0 🌐 Public

github-aciton-injection-test

This repo is a sample repo for Github Action Injection.

⭐ 7 🌐 Public

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

⭐ 57 🌐 Public 📦 Archived

go-github-selfupdate

Binary self-update mechanism for Go commands using GitHub

⭐ 2 🌐 Public

go-github-selfupdate-patched

go get error patched version

⭐ 3 🌐 Public 📦 Archived

golang-developer-roadmap

Roadmap to becoming a Go developer in 2020

⭐ 8 🌐 Public

Multithreaded, Postgres-based, Active Job backend for Ruby on Rails.

⭐ 0 🌐 Public

Gospider - Fast web spider written in Go

⭐ 4 🌐 Public

A simplicity and clean documentation theme

⭐ 24 🌐 Public

A tool to check a bunch of URLs that contain reflecting params.

⭐ 0 🌐 Public

🐰 Managing command snippets for hackers/bug bounty hunters. with pet.

⭐ 105 🌐 Public

⭐ 11 🌐 Public

tool, page code for https://www.hahwul.com

⭐ 4 🌐 Public

Security test tool for Blind XSS

⭐ 26 🌐 Public 📦 Archived

hello world in different languages

⭐ 0 🌐 Public

heroku-buildpack-firefox

Heroku buildpack for Firefox with geckodriver

⭐ 5 🌐 Public

heroku-buildpack-geckodriver

⭐ 2 🌐 Public

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.

⭐ 5 🌐 Public

Hex Viewer & Editor Plugin for Caido

⭐ 12 🌐 Public

golang logger for hahwul z

⭐ 1 🌐 Public

homebrew-authz0

⭐ 3 🌐 Public

homebrew-backbomb

backbomb homebrew repository

⭐ 4 🌐 Public

🍻 Default formulae for the missing package manager for macOS (or Linux)

⭐ 3 🌐 Public

homebrew-cyclonedx-cr

⭐ 0 🌐 Public

homebrew-dalfox

⭐ 6 🌐 Public

⭐ 1 🌐 Public

⭐ 2 🌐 Public

⭐ 0 🌐 Public

homebrew-jwt-hack

⭐ 4 🌐 Public

⭐ 3 🌐 Public

⭐ 0 🌐 Public

⭐ 0 🌐 Public

homebrew-s3reverse

⭐ 2 🌐 Public

homebrew-smugglex

⭐ 0 🌐 Public

⭐ 1 🌐 Public

hugo-theme-stack

Card-style Hugo theme designed for bloggers

⭐ 1 🌐 Public

An OOB interaction gathering server and client library

⭐ 1 🌐 Public

IntruderPayloads

A collection of Burpsuite Intruder payloads, fuzz lists and file uploads

⭐ 6 🌐 Public