Daniel Púa (devploit) devploit
- Málaga, Spain
- https://danielpua.dev/
- @devploit
- in/daniel-pua
Lists (11)
Sort Name ascending (A-Z)
Stars
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function.
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
The recursive internet scanner for hackers. 🧡
Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
An OSINT tool to search for accounts by username and email in social networks.
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
Automatic SSRF fuzzer and exploitation tool
File upload vulnerability scanner and exploitation tool.
Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!
Extract files from any kind of container formats
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
🕷️ A `.git` folder exploiting tool that is able to restore the entire Git repository, including stash, common branches and common tags.
Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.
HostHunter a recon tool for discovering hostnames using OSINT techniques.
IDA Pro plugin to examine the glibc heap, focused on exploit development
A collection of pwn/CTF related utilities for Ghidra
The OWASP OFFAT tool autonomously assesses your API for prevalent vulnerabilities, though full compatibility with OAS v3 is pending. The project remains a work in progress, continuously evolving to...
Scan for secrets in dangling commits on GitHub using GH Archive data.