Skip to content
View hpy's full-sized avatar

Highlights

  • Pro

Block or report hpy

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Showing results

Home Assistant SunPower Integration using the local installer ethernet interface.

Python 94 37 Updated Sep 30, 2025

Quickly find differences and similarities in disassembled code

Java 2,969 221 Updated Nov 10, 2025

The only GraphQL wordlist you'll ever need. Operations, field names, type names... Collected on more than 60k distinct GraphQL schemas.

TypeScript 458 50 Updated Oct 3, 2023

A set of simple servers (currently HTTP/HTTPS and DNS) which allow configurable and scriptable responses to network requests.

Python 63 6 Updated Aug 5, 2022

A Burp Suite extension for finding DNS vulnerabilities in web applications!

Java 91 14 Updated Sep 12, 2023

CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

Dockerfile 284 43 Updated Aug 24, 2024

IIS shortname scanner written in Go

Go 355 44 Updated Mar 25, 2023

Resources for the deps.dev API

Go 389 44 Updated Mar 24, 2026

Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!

Go 1,065 134 Updated Mar 24, 2026

This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard certificate. The objective is to simplify as much as possible t…

Python 294 43 Updated Mar 25, 2026

🎤⌨️ Acoustic keyboard eavesdropping

C++ 8,992 602 Updated Jan 15, 2023

Extract JavaScript files from burp suite project with ease.

Kotlin 97 15 Updated Feb 19, 2022

A library for detecting known secrets across many web frameworks

Python 788 77 Updated Mar 29, 2026

The result of scraping over 500 million web pages to form the mother of all wordlists

9 2 Updated Jun 1, 2023

Deploy a SOCKS5 proxy in DigitalOcean and autoconfigure the Burp proxy settings to route all traffic through the droplet

Java 56 9 Updated Oct 23, 2024
Rust 35 8 Updated Feb 10, 2023

REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications

Python 1,323 150 Updated Aug 7, 2025

Grammar-based HTTP/1 fuzzer with mutation ability

Python 262 32 Updated Oct 30, 2024
Go 7 1 Updated Feb 25, 2023

Hidden parameters discovery suite

Rust 2,039 190 Updated Sep 8, 2024

Detects request smuggling via HTTP/2 downgrades.

Python 94 9 Updated Jul 30, 2022

GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations

Python 409 43 Updated Dec 24, 2022

declutters url lists for crawling/pentesting

Python 1,540 169 Updated Feb 23, 2025

Cybersecurity of Machine Learning and Artificial Intelligence

JavaScript 69 20 Updated Mar 4, 2022

RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.

Python 367 87 Updated Apr 14, 2022

Parse HPROF files from the Spring Boot Heapdump Actuator

Python 29 5 Updated Jun 11, 2024

A tool to dump Java serialization streams in a more human readable form.

Java 1,066 128 Updated Jun 21, 2024

TLS Redirection

118 22 Updated Nov 21, 2017
Go 75 13 Updated Feb 11, 2024
Next