Skip to content

@assetnote Assetnote

All

    Repositories list

    36 repositories

    • surf

      Public
      Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates.
      Go
      •57•756•0•2•Updated Jul 10, 2026Jul 10, 2026

    • pgx

      Public
      PostgreSQL driver and toolkit for Go
      Go
      •
      MIT License
      •1.1k•2•0•1•Updated Jul 10, 2026Jul 10, 2026

    • crypto

      Public
      [mirror] Go supplementary cryptography libraries
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •2.3k•0•0•3•Updated Jul 10, 2026Jul 10, 2026

    • zgrab2

      Public
      Fast Go Application Scanner
      Go
      •
      Other
      •375•0•0•1•Updated Jul 10, 2026Jul 10, 2026

    • newtowner

      Public
      Abuse trust-boundaries to bypass firewalls and network controls
      Go
      •77•433•3•2•Updated Jul 10, 2026Jul 10, 2026

    • kiterunner

      Public
      Contextual Content Discovery Tool
      Go
      •
      GNU Affero General Public License v3.0
      •342•3.3k•41•10•Updated Jul 10, 2026Jul 10, 2026

    • h2csmuggler

      Public
      Go
      •
      Other
      •13•79•1•3•Updated Jul 10, 2026Jul 10, 2026

    • hyoketsu

      Public
      Go
      •8•113•2•1•Updated Jun 30, 2026Jun 30, 2026

    • goja-heap-oob

      Public
      Proof of concept exploits for Goja JavaScript engine
      JavaScript
      •0•2•0•0•Updated Jun 29, 2026Jun 29, 2026

    • cpanel2shell-scanner

      Public
      High fidelity scanner for CVE-2026-41940 (cPanel & WHM authentication bypass)
      Python
      •25•93•0•0•Updated May 18, 2026May 18, 2026

    • masscan

      Public
      TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
      C
      •
      GNU Affero General Public License v3.0
      •3.2k•0•0•0•Updated Apr 23, 2026Apr 23, 2026

    • uptime-kuma

      Public
      A fancy self-hosted monitoring tool
      JavaScript
      •
      MIT License
      •8.5k•1•0•1•Updated Apr 17, 2026Apr 17, 2026

    • dbmate

      Public
      :rocket: A lightweight, framework-agnostic database migration tool.
      Go
      •
      MIT License
      •379•6•0•3•Updated Mar 27, 2026Mar 27, 2026

    • teleport

      Public
      The easiest, and most secure way to access and protect all of your infrastructure.
      Go
      •
      GNU Affero General Public License v3.0
      •2.2k•0•0•2•Updated Mar 18, 2026Mar 18, 2026

    • wordlists

      Public
      Automated & Manual Wordlists provided by Assetnote
      bruteforcecontent-discoverywordlists
      bruteforcecontent-discoverywordlistsbruteforce-wordlist
      CSS
      •
      Apache License 2.0
      •177•1.7k•3•0•Updated Feb 27, 2026Feb 27, 2026

    • react2shell-scanner

      Public
      High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)
      Python
      •269•2.5k•4•9•Updated Dec 7, 2025Dec 7, 2025

    • hopgoblin

      Public
      Adobe Experience Manager (AEM) hacking toolkit
      Python
      •19•118•0•0•Updated Sep 26, 2025Sep 26, 2025

    • cimg-postgres

      Public
      Dockerfile
      •
      MIT License
      •27•1•0•0•Updated Sep 16, 2025Sep 16, 2025

    • pgconn

      Public
      Go
      •
      MIT License
      •88•0•0•1•Updated Aug 1, 2025Aug 1, 2025

    • nowafpls

      Public
      Burp Plugin to Bypass WAFs through the insertion of Junk Data
      Python
      •147•1.5k•4•0•Updated Jul 14, 2025Jul 14, 2025

    • celery-exporter

      Public
      A Prometheus exporter for Celery metrics
      Python
      •
      MIT License
      •134•0•0•0•Updated Jan 20, 2025Jan 20, 2025

    • ghostbuster

      Public
      Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
      Python
      •
      GNU Affero General Public License v3.0
      •36•279•7•3•Updated Sep 20, 2024Sep 20, 2024

    • pg-repack-docker

      Public archive
      Docker image for 'pg_repack' (PostgreSQL extension) to use 'client-side' to run/invoke the actual repack functionality for a PostgreSQL database with the extens…
      Shell
      •27•0•0•0•Updated Aug 30, 2024Aug 30, 2024

    • rod

      Public
      A Chrome DevTools Protocol driver for web automation and scraping.
      Go
      •
      MIT License
      •484•6•0•0•Updated Aug 19, 2024Aug 19, 2024

    • docker-pgbouncer

      Public
      Minimal PgBouncer image that is easy to configure
      Shell
      •
      MIT License
      •297•1•0•0•Updated Jun 3, 2024Jun 3, 2024

    • cloudflare-go

      Public
      Go library for the Cloudflare v4 API
      Go
      •
      BSD 3-Clause "New" or "Revised" License
      •781•1•0•1•Updated May 1, 2024May 1, 2024

    • kitebuilder

      Public
      Python
      •
      GNU Affero General Public License v3.0
      •8•25•0•4•Updated Feb 11, 2024Feb 11, 2024

    • squirrel

      Public
      Fluent SQL generation for golang
      Go
      •
      Other
      •511•2•0•3•Updated Feb 11, 2024Feb 11, 2024

    • rules_python

      Public
      Experimental Bazel Python Rules
      Python
      •
      Apache License 2.0
      •722•3•0•4•Updated Feb 11, 2024Feb 11, 2024

    • exploits

      Public
      Repository to store exploits created by Assetnotes Security Research team
      Java
      •24•183•1•1•Updated Nov 7, 2023Nov 7, 2023
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.