Advanced utilities and resources for the digital frontier
It was a Tuesday in late autumn when Lena Brandt got the call she'd been half-expecting for six months. Lena ran the small internal security team at a regional freight and warehousing company — the kind of business that doesn't make headlines, but that quietly moves a great deal of...
XSS-B2 is an XSS testing automation tool for authorized security assessments. Important: XSS-B2 is intended strictly for systems you own or have explicit written authorization to test (for example, an in-scope bug bounty target or a signed engagement). Testing applications without permission is illegal in most jurisdictions. See our Terms...
HTTP Parameter Discovery Suite 🔎What is Arjun? Arjun is a powerful command-line tool used in web security testing. It’s designed to find HTTP parameters (GET & POST) in web applications by fuzzing endpoints. Essentially, it helps bug bounty hunters, penetration testers, and security researchers discover hidden or undocumented parameters that...
Attack Surface Management Platform GitHub Repository: https://github.com/1N3/Sn1per Sn1per is an automated attack‑surface management and penetration‑testing toolkit that integrates both open‑source and commercial scanners to discover assets, identify CVE exposures, and enumerate vulnerabilities across web, network, and application layers. It supports diverse modes—ranging from stealth, OSINT recon, to full “nuke” scans—providing...
GitHub Repository: https://github.com/s0md3v/Smap Introduction Smap is an open-source port scanning tool developed by Somdev Sangwan (s0md3v) that serves as a lightweight, passive alternative to Nmap. By leveraging Shodan.io's free API, Smap fetches pre-existing port data, making it significantly faster than traditional active scanning tools. Designed as a drop-in replacement for...