EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.

A collection of random bits of information common to many individual penetration tests, red teams, and other assessments

A wiki focusing on aggregating and documenting various SQL injection methods

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

Explanation and full RCE PoC for CVE-2025-55182

Original Proof-of-Concepts for React2Shell CVE-2025-55182

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

Metasploit Framework

✨⚡️ A feature-rich GraphQL Client for all platforms.

The open-source, cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC. With Cloud, Local and Git storage.

🛰️ Represent any GraphQL API as an interactive graph

Moodle - the world's open source learning platform

This is a webshell open source project

A powerful browser extension to create, edit and delete cookies

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

A Swiss-army app for developers

Damn Vulnerable GraphQL Application is an intentionally vulnerable GraphQL service implementation designed for learning about and practising GraphQL Security.

Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥

WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Brotli compression format

Reverse Shell as a Service

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

Native Powers Talk demos

JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html

Simple CLI tool to url encode or url decode

Bash For Ethical Hacking

Automatic SQL injection and database takeover tool