Discover @hahwul Open Source projects

HAHWUL (@hahwul)

hahwul

Stars
15,025
Global Rank 1,242 (Top 0.05 %)
Followers 2,333
Following 60
Registered over 9 years ago
Most used languages

Ruby
37.7 %

Go
30.4 %

Shell
8.7 %

Crystal
8.7 %

Python
5.8 %

JavaScript
4.3 %

HTML
2.9 %

Dockerfile
1.4 %
Location 🇰🇷 South Korea
Country Total Rank 13
Country Ranking

Go
1

Ruby
1

Crystal
2

Dockerfile
14

Shell
52

Python
104

HTML
144

JavaScript
453

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

DevSecOps

♾️ Collection and Roadmap for everyone who wants DevSecOps. Hope your DevOps are more safe 😎

XSpear

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

jwt-hack

🔩 jwt-hack is tool for hacking / security testing to JWT. Supported for En/decoding JWT, Generate payload for JWT attack and very fast cracking(dict/brutefoce)

MobileHackersWeapons

Mobile Hacker's Weapons / A collection of cool tools used by Mobile hackers. Happy hacking , Happy bug-hunting

a2sv

Auto Scanning to SSL Vulnerability

authz0

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection

droid-hunter

(deprecated) Android application vulnerability analysis and Android pentest tool

metasploit-autopwn

db_autopwn plugin of metasploit

deadfinder

🏴‍☠️ Find dead-links (broken links)

RegexPassive

🔭 Collection of regexp pattern for security passive scanning

mzap

⚡️ Multiple target ZAP Scanning

XSS-Payload-without-Anything

XSS Payload without Anything.

hack-pet

🐰 Managing command snippets for hackers/bug bounty hunters. with pet.

s3reverse

The format of various s3 buckets is convert in one format. for bugbounty and security testing.

gee

🏵 Gee is tool of stdin to each files and stdout. It is similar to the tee command, but there are more functions for convenience. In addition, it was written as go

websocket-connection-smuggler

websocket-connection-smuggler

gitls

🖇 Enumerate git repository URL from list of URL / User / Org. Friendly to pipeline

ws-smuggler

WebSocket Connection Smuggler

ras-fuzzer

RAS(RAndom Subdomain) Fuzzer

MemBi

All the members of bugbounty and infosec. If you don't know who to follow, see!

backbomb

💣 Dockerized penetration-testing/bugbounty/app-sec testing environment

hbxss

Security test tool for Blind XSS

fuzzstone

action-dalfox

XSS scanning with Dalfox on Github-action

recon-raven

Reconnaissance tool of Penetration test & Bug Bounty

xssmaze

XSSMaze is a web service designed to test and improve the performance of security testing tools by providing various cases of XSS vulnerabilities.

noir

♠️ Noir is an attack surface detector form source code.

assets.hahwul.com

assets for www.hahwul.com

vais

SWF Vulnerability & Information Scanner

can-i-protect-xss

Everything about xss protection technology

volt

⚡ Golang library for quick make pentest tools

raven

Automation Hacking & Penetration Testing Suite

vunlink

Auto Web Vulnerability Scanning Framework

hahwul

websocket-connection-smuggling-go

websocket-connection-smuggling write in go

zest-env

🐋 Zest CLI Environment

github-aciton-injection-test

This repo is a sample repo for Github Action Injection.

awesome-zap-extensions

A curated list of amazingly awesome ZAP Extensions

VAHA

Web for security engineer & hacker

jqueen

buildpack-nmap

install nmap and set alias buildpack of heroku

m2h.js

remote markdown document to html on DOM

homebrew-dalfox

zap-cloud-scan

hahwul-testzz

tool, page code for https://www.hahwul.com

qs-openvpn

quick setup openvpn

eoyc

Encoding Only Your Choices

zaproxy-ruby

A Ruby Implementation and Library for Easy Utilization of ZAP API

cyan-snake

Live OS for Physical hacking

podopunch

Easy testing from multiple android devices

openvas_install_script

OpenVAS Scanner Install Script on Debian

rings

homebrew-jwt-hack

buildpack-zap-daemon

zap(zed attack proxy) daemon mode buildpack of heroku

CaidoTweaks

restime

Web page response time checker

exploit-db_to_dokuwiki

exploit-db(edb) convert to dokuwiki template

homebrew-backbomb

backbomb homebrew repository

booungJS

Vulnerability analysis to javascript using javascript and web debugger

homebrew-authz0

licaner

ftc

simple copy to file to clipboard

struts2-rce-cve-2017-9805-ruby

homebrew-mzap

go-github-selfupdate-patched

go get error patched version

crystal-smuggle

jekyll-securitytxt

Jekyll plugin for security.txt

shooting-scheme

custom scheme testing tool with checklist

action-authz0-test

mycert

lab

homebrew-gee

homebrew-s3reverse

caido-crystal

Caido implementation for crystal

heroku-buildpack-geckodriver

dawn-of-seoul

It is a Caido theme made to feel blue, the representative dawn color of Seoul.

vuln_test

<video><embed><object><meta><body><script><frame><frameset>

projectsend_r582_webshell

ProjectSend_r582_webshell exploit

homebrew-eoyc

bad-usb-scripts

purl.cr

hlogger

golang logger for hahwul z