A set of resources to become a Practical Software Architect: decision making, efficient meetings, architecture guide, etc.

Learn how to design large-scale systems. Prep for the system design interview. Includes Anki flashcards.

List HackerOne private program assets

A central place to keep track of relevant BountyMachine talks, blogs, and interesting things!

Workflow Engine for Kubernetes

Pull out bits of URLs provided on stdin

httpx is a fast and multi-purpose HTTP toolkit that allows running multiple probes using the retryablehttp library.

Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

Tool to find JavaScript files on Websites

Generates combination of domain names from the provided input.

🔍 gowitness - a golang, web screenshot utility using Chrome Headless

The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, ffuf, masscan, nuclei, meg and many more!

Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3

Top Ten Web Hacking Techniques List

A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)

Quick SQLMap Tamper Suggester

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

HTTP parameter discovery suite.

OneForAll是一款功能强大的子域收集工具

Martian is a library for building custom HTTP/S proxies

Chaos Monkey is a resiliency tool that helps applications tolerate random instance failures.

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Burp Suite Extension to monitor new scope

React Native (Expo) Redux, redux saga boilerplate