Original, practical guides to open-source security tools — for authorized testing and learning only.
The following is an illustrative scenario. The people and company are fictional composites used to explain, in realistic terms, what a compromise-assessment tool like THOR does and why it matters. The technical descriptions of THOR, YARA, and Sigma are factual; the narrative around them is not a real case study....
XSS-B2 is an XSS testing automation tool for authorized security assessments. Important: XSS-B2 is intended strictly for systems you own or have explicit written authorization to test (for example, an in-scope bug bounty target or a signed engagement). Testing applications without permission is illegal in most jurisdictions. See our Terms...
HTTP Parameter Discovery Suite 🔎What is Arjun? Arjun is a powerful command-line tool used in web security testing. It’s designed to find HTTP parameters (GET & POST) in web applications by fuzzing endpoints. Essentially, it helps bug bounty hunters, penetration testers, and security researchers discover hidden or undocumented parameters that...
Attack Surface Management Platform GitHub Repository: https://github.com/1N3/Sn1per Sn1per is an automated attack‑surface management and penetration‑testing toolkit that integrates both open‑source and commercial scanners to discover assets, identify CVE exposures, and enumerate vulnerabilities across web, network, and application layers. It supports diverse modes—ranging from stealth, OSINT recon, to full “nuke” scans—providing...
GitHub Repository: https://github.com/s0md3v/Smap Introduction Smap is an open-source port scanning tool developed by Somdev Sangwan (s0md3v) that serves as a lightweight, passive alternative to Nmap. By leveraging Shodan.io's free API, Smap fetches pre-existing port data, making it significantly faster than traditional active scanning tools. Designed as a drop-in replacement for...