Lists (32)
API
AppSec
Appsec Training
Burp Extensions
Burp Extensions Development
Cloud
Data and Crypto
Data Identification and Manipula
Defense
Design
Detection And Forensics (DFIR)
Discovery, OSINT, Fingerprinting
Exploitation
Fuzz
Hiring and Recruiting
HTTP Scanners and DAST
IoT
Learning
Machine Learning and AI
Mobile
Network Scanners
Networking and Network Scans
Passwords
Pentest/Social
Personal and Productivity
Python
Reporting and Documentation
Resources and Standards
Reverse Engineering
SAST and Secret Scanning
Utility
Wordlists and Parsing
Stars
REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications
60k+ WordPress Nuclei templates, updated daily from Wordfence intel—filter by severity/tags/CVE and scan in one line. 🚀🔒
a security scanner for custom LLM applications
HomePwn - Swiss Army Knife for Pentesting of IoT Devices
Differential testing framework for HTTP implementations
A Burp Suite extension to add OpenAI (GPT) on Burp and help you with your Bug Bounty recon to discover endpoints, params, URLs, subdomains and more!
A simple tool for bypassing file upload restrictions.
A python script to scan for Apache Tomcat server vulnerabilities.
A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode
Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)
the Network Protocol Fuzzer that we will want to use.
An OSINT tool that helps detect members of a company with leaked credentials
A library for detecting known secrets across many web frameworks
Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
a javascript change monitoring tool for bugbounties
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in test…
Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.
Open Source Static Scanning tool to detect data flows in your code, find data security vulnerabilities & generate accurate Play Store Data Safety Report.
Hackish way to intercept and modify non-HTTP protocols through Burp & others.
A Python implementation of ADB with shell and FileSync functionality.
BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.
Tools for auditing WAFS