-
joern-cheatsheet Public
A simple repo with different joern queries and function to find vulnerabilities in different languages (C, C++, Javascript, Java, Python, PHP, Go, Kotlin, Swift, C+ & x86/x64 )
-
NodeGoat-hardening Public
Forked from OWASP/NodeGoatThe OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
HTML Apache License 2.0 UpdatedFeb 15, 2026 -
just-another-vulnerable-java-application Public
Forked from asecurityguru/just-another-vulnerable-java-applicationJava Other UpdatedFeb 7, 2026 -
confusploit Public
This is a python script that can be used with Shodan CLI to mass hunting Confluence Servers vulnerable to CVE-2022-26134
-
favihash Public
It's a script to find assets using favicon.ico
-
autoHackMobile Public
autoHackMobile es un script Bash que automatiza la configuración de un entorno de mobile hacking en Android para pruebas de seguridad.
Shell UpdatedNov 5, 2025 -
hexstrike-ai Public
Forked from 0x4m4/hexstrike-aiHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug b…
Python UpdatedSep 9, 2025 -
CVEs Public
This repository contains security vulnerabilities I have discovered, including details on affected products, impact, PoCs, and mitigation steps, following responsible disclosure practices.
UpdatedJun 17, 2025 -
AngryOxide Public
Forked from Ragnt/AngryOxide802.11 Attack Tool
Rust GNU General Public License v3.0 UpdatedFeb 7, 2025 -
endpointdiscover Public
endpointdiscover is a Python-based tool developed to aid in the discovery of API endpoints hidden within JavaScript files of a web application
Python MIT License UpdatedJan 19, 2025 -
openvpn-install Public
Forked from JLalib/openvpn-installOpenVPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE, Amazon Linux 2 and Raspberry Pi OS
-
wireguard-install Public
Forked from JLalib/wireguard-installWireGuard VPN server installer for Ubuntu, Debian, AlmaLinux, Rocky Linux, CentOS, Fedora, openSUSE and Raspberry Pi OS
Shell MIT License UpdatedDec 11, 2024 -
MMSF Public
Forked from St3v3nsS/MMSFMassive Mobile Security Framework
Python MIT License UpdatedNov 25, 2024 -
apex_extractor Public
This script analyzes JavaScript files from Salesforce applications, extracting aura:// and apex:// controller URLs for penetration testing. It outputs these findings to object.txt, aiding in ident…
-
sj Public
Forked from BishopFox/sjA tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.
Go MIT License UpdatedNov 15, 2024 -
cherrybomb Public
Forked from blst-security/cherrybombStop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.
Rust Apache License 2.0 UpdatedOct 25, 2024 -
stride-gpt Public
Forked from mrwadams/stride-gptAn AI-powered threat modeling tool that leverages OpenAI's GPT models to generate threat models for a given application based on the STRIDE methodology.
Python MIT License UpdatedOct 17, 2024 -
AuthzAI Public
Forked from ngalongc/AuthzAIPython GNU Affero General Public License v3.0 UpdatedOct 15, 2024 -
Openapi-Schema-Builder Public
Forked from dr34mhacks/Openapi-Schema-BuilderThis tool is designed to seamlessly convert Postman collections into OpenAPI schemas. This conversion is essential for API security testing and integration, especially with tools like Burp Suite th…
Python MIT License UpdatedAug 29, 2024 -
gin Public
Forked from gin-gonic/ginGin is a HTTP web framework written in Go (Golang). It features a Martini-like API with much better performance -- up to 40 times faster. If you need smashing performance, get yourself some Gin.
Go MIT License UpdatedAug 24, 2024 -
confused Public
Forked from visma-prodsec/confusedTool to check for dependency confusion vulnerabilities in multiple package management systems
Go MIT License UpdatedAug 19, 2024 -
mitmrouter Public
Forked from nmatt0/mitmrouterBash script to automate setup of Linux router useful for IoT device traffic analysis and SSL mitm
-
MailSniper Public
Forked from dafthack/MailSniperMailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It ca…
PowerShell MIT License UpdatedAug 7, 2024 -
BlockChainVoting Public
Forked from mehtaAnsh/BlockChainVotingA blockchain based E-voting system
JavaScript MIT License UpdatedJul 31, 2024 -
Frida-Labs Public
Forked from DERE-ad2001/Frida-LabsThe repo contains a series of challenges for learning Frida for Android Exploitation.
MIT License UpdatedJul 26, 2024 -
blackbird Public
Forked from antoniaci/blackbirdAn OSINT tool to search for accounts by username and email in social networks.
Python UpdatedJul 20, 2024 -
APIFuzzer Public
Forked from KissPeter/APIFuzzerFuzz test your application using your OpenAPI or Swagger API definition without coding
Python GNU General Public License v3.0 UpdatedJul 16, 2024 -
TicTaaC Public
Forked from rusakovichma/TicTaaCEasy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. Sugar-Free and Secure: no any external dependencies except f…
Java Apache License 2.0 UpdatedJun 26, 2024 -
GQLSpection Public
Forked from doyensec/GQLSpectionGQLSpection - parses GraphQL introspection schema and generates possible queries
Python Apache License 2.0 UpdatedJun 21, 2024 -
simple_searcher Public
"simple_searcher" es una herramienta de detección de vulnerabilidades que busca patrones de código malicioso en archivos de código fuente para mejorar la seguridad del software
Python MIT License UpdatedJun 9, 2024
{{ message }}
You can’t perform that action at this time.