Building 70 Projects ranging from beginner to advanced so anyone can — learn from, build upon, use as a reference, or even copy directly. Owned by my cybersecurity company 👇
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
An advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
Fast web fuzzer written in Go
Directory/File, DNS and VHost busting tool written in Go
A Modern Orchestration Engine for Security
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
🔍 Search anyone's digital footprint across 300+ websites
Rockyou for web fuzzing
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.
MCP server for Frida.
reconnaissance for agent attack surfaces
Cameradar hacks its way into RTSP videosurveillance cameras
DNS Takeover tool written in Go
SSH based reverse shell
Idiomatic nmap library for go developers
Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration
JsOwl —— Go 编写的 Web 安全信息收集利器。集 JavaScript 信息收集、API 端点提取、敏感信息扫描、攻击面梳理 于一体,同时提供 CLI 工具与 Go 库。内置 direct / browser / auto 三种采集模式,兼容 HaE 规则,支持登录态扫描、运行时交互、AI 辅助分析与 MCP Server,输出 JSON 与交互式 HTML 报告,是渗透测试、红队信息收集与 Web 安全测试的高效自动化方案。
A local proxy that keeps client data out of Claude Code.
the blazing-fast pentesting suite.