Skip to content
View joohoi's full-sized avatar
🦨
🦨

Sponsors

@Snownull
@projectdiscovery

Organizations

@certbot @TurkuSec @ffuf @citysecs @kybervpk @visma-prodsec

Block or report joohoi

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

Track incidents, map attack paths, collaborate in real time, and generate AI-powered reports — all in one place.

Python 19 Updated Mar 19, 2026

Rust tool to detect cell site simulators on an orbic mobile hotspot

Rust 5,130 413 Updated Apr 24, 2026

A proof-of-concept of a self-replicating malware for Maven build environments.

Java 6 Updated Mar 27, 2025

Webhood is a privately hosted URL scanner used by threat hunters and security analysts for analyzing phishing and malicious sites.

CSS 32 6 Updated Oct 7, 2024

🔎Searches Hash APIs to crack your hash quickly🔎 If hash is not found, automatically pipes into HashCat⚡

Python 1,405 96 Updated Mar 5, 2025

Fast web fuzzer written in Go

Go 15,945 1,552 Updated Apr 24, 2025

Check which CDN providers an IP list belongs to

Go 193 35 Updated May 10, 2023

Rockyou for web fuzzing

Go 3,133 538 Updated Mar 11, 2026

DLL Hijack Search Order Enumeration BOF

C 149 21 Updated Nov 3, 2021

Fake Protocol Server

Python 1,607 181 Updated Jan 2, 2025

Target practice for ffuf

PHP 72 12 Updated Aug 10, 2021

An OOB interaction gathering server and client library

Go 4,290 457 Updated Apr 22, 2026

Fraktal's Ransomware Emulator

C# 101 23 Updated Apr 5, 2024

REST API Fuzz Testing (RAFT): Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that ena…

F# 262 41 Updated Jan 13, 2022

zero-trust remote firewall instrumentation

Go 261 31 Updated Jan 19, 2026

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

PowerShell 527 111 Updated Jan 21, 2022

Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependencies. CI and Git friendly.

Python 874 123 Updated Sep 1, 2023

Tool to check for dependency confusion vulnerabilities in NuGet package management systems

C# 15 5 Updated Mar 6, 2021

Tool to check for dependency confusion vulnerabilities in multiple package management systems

Go 779 107 Updated Aug 19, 2024

Data exfiltration over DNS request covert channel

JavaScript 887 190 Updated Apr 29, 2024

A client software for https://github.com/joohoi/acme-dns

Go 137 25 Updated Jun 29, 2023

PwnMachine is a self hosting solution based on docker aiming to provide an easy to use pwning station for bug hunters.

Vue 328 54 Updated Jul 31, 2024

qsinject (Query String Inject) is a tool that allows you to quickly substitute query string values with regex matches, one-at-a-time.

Go 30 8 Updated May 6, 2020

HackerOne "in scope" domains

Python 512 133 Updated Apr 24, 2026

Frida Scripts

JavaScript 657 138 Updated Sep 26, 2022

A thorough library database to assist with binary exploitation tasks.

Python 196 16 Updated Aug 1, 2022

Make temporary edits to your Go module dependencies

Go 913 19 Updated Jun 3, 2025

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Go 34,683 312 Updated Apr 24, 2026

CodiMD - Realtime collaborative markdown notes on all platforms.

JavaScript 10,047 1,119 Updated Oct 2, 2025

Private keys that have become public ...

PHP 185 30 Updated Apr 7, 2026
Next