Projects

Open-source tools, security collections, and apps.

Dalfox

Dalfox

XSS scanner and utility focused on automation.

RUST  ★
OWASP Noir

OWASP Noir

Attack surface detector via static analysis.

CRYSTAL  ★
Hwaro

Hwaro

Lightweight static site generator.

CRYSTAL  ★

Security Tools

Dalfox XSS scanner and utility for automated detection.
OWASP Noir Attack surface detector via static analysis.
JWT-HACK JWT analysis and attack toolkit.
Authz0 Automated authorization testing. 420+
Urx URL collector from OSINT archives. 170+
Deadfinder Dead link finder. 170+
SmuggleX HTTP request smuggling scanner. 115+
Mzap Multiple target ZAP scanning. 100+
Hack-pet Command snippets for hackers. 100+
S3reverse S3 bucket format converter. 85+
Gee Pipe stdin to files and stdout. 85+
WS-Smuggler WebSocket connection smuggling. 45+
XSSMaze XSS vulnerability test service. 30+
MCP-Hack MCP (Model Context Protocol) hack toolkit.

Archived

XSpear XSS scanning and parameter analysis. 1.3k+
A2SV Auto scanning to SSL vulnerability. 630+

Collections & Resources

WebHackersWeapons Curated tools for web hackers.
DevSecOps DevSecOps roadmap and resources.
MobileHackersWeapons Tools for mobile security testing.
Mad-Metasploit Custom Metasploit modules and plugins. 400+
RegexPassive Regexp patterns for passive scanning. 115+
XSS-Payload-without-Anything XSS payload research and bypass techniques. 100+

Caido Plugins

OmniOAST Unified OAST provider management.
ShadowShell Multi-terminal with AI presets and instant Cmd+J access.
Hex Hex viewer and editor.
Midnight in Seoul Midnight blue theme for Caido.

Crystal Ecosystem

Hwaro Lightweight static site generator.
Doma Put your directories on the cutting board.
CycloneDX-cr CycloneDX SBOM generator for Crystal.
Eoyc Data processing utility chain.
fm.cr Crystal bindings for Apple FoundationModels.framework.
acp.cr Crystal implementation of Agent Client Protocol (ACP).
caido.cr Caido SDK implementation for Crystal.
sarif.cr SARIF format implementation for Crystal.
purl.cr Package URL (purl) implementation for Crystal.
spdx.cr SPDX license list implementation for Crystal.
zap.cr ZAP API client for Crystal.
vex.cr OpenVEX implementation for Crystal.
cwe.cr CWE (Common Weakness Enumeration) for Crystal.
kev.cr CISA KEV catalog client for Crystal.
epss.cr EPSS scoring client for Crystal.

Developer Tools & Apps

Goyo Clean documentation theme for Zola.
TextNova AI-powered text utility · iOS, iPadOS, macOS.
NoDecaf Keep your Mac awake, exactly when you need it · macOS.