OpenAPI fuzzer for web applications written in go

Rich-powered CLI that breaks each HTTP request into DNS, connect, TLS, wait, and transfer phases with waterfall timelines, compact summaries, or metrics-only output.

Tool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR / APK applications.

View HTTP/HTTPS requests made by any Linux program

A collection of Turbo Intruder scripts.

Embed the Power of Lua into NGINX HTTP servers

Concatenate a directory full of files into a single prompt for use with LLMs

The recursive internet scanner for hackers. 🧡

An autonomous agent that conducts deep research on any data using any LLM providers

Fabric is an open-source framework for augmenting humans using AI. It provides a modular system for solving specific problems using a crowdsourced set of AI prompts that can be used anywhere.

Differential testing framework for HTTP implementations

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

🐬 A collection of awesome resources for the Flipper Zero device.

80+ Gadgets(30 More than ysoserial). JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server.

Lovely console emulator package for Windows

Opensource assets and vulnerability scanning tool

Subdomains analysis and generation tool. Reveal the hidden!

KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.

Curated list of links, references, books videos, tutorials (Free or Paid), Exploit, CTFs, Hacking Practices etc. which are related to AWS Security

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

IDA Pro plugin for reconstructing original .proto files from binary.

Prevent Kubernetes misconfigurations from reaching production (again 😤 )! From code to cloud, Datree provides an E2E policy enforcement solution to run automatic checks for rule violations. See our…

CATS is a REST API Fuzzer and negative testing tool for OpenAPI endpoints. CATS automatically generates, runs and reports tests with minimum configuration and no coding effort. Tests are self-heali…

bypass-url-parser

ZKar is a Java serialization protocol analysis tool implement in Go.