Lists (1)
Stars
A collection of Turbo Intruder scripts.
Find authentication (authn) and authorization (authz) security bugs in web application routes.
🐀 Small chrome extension to monitor (and optionally block) other extensions' network calls
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-…
A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!
Reproduce DeFi hacked incidents using Foundry.
😈📚 A curated library of research papers and presentations for counter-detection and web privacy enthusiasts.
🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.
A fork and successor of the Sulley Fuzzing Framework
🐬 A collection of awesome resources for the Flipper Zero device.
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play.
Take a list of domains and probe for working HTTP and HTTPS servers
Arsenal is just a quick inventory and launcher for hacking programs
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …
A list of resources for those interested in getting started in bug bounties
A malicious LDAP server for JNDI injection attacks
The Browser Exploitation Framework Project
Powerful framework for rogue access point attack.
A powerful and user-friendly binary analysis platform!
Log4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.
All Algorithms implemented in Python
A curated reading list about offensive IT security
💮 amazing QRCode generator in Python (supporting animated gif) - Python amazing 二维码生成器（支持 gif 动态图片二维码）