Lists (32)
API
AppSec
Appsec Training
Burp Extensions
Burp Extensions Development
Cloud
Data and Crypto
Data Identification and Manipula
Defense
Design
Detection And Forensics (DFIR)
Discovery, OSINT, Fingerprinting
Exploitation
Fuzz
Hiring and Recruiting
HTTP Scanners and DAST
IoT
Learning
Machine Learning and AI
Mobile
Network Scanners
Networking and Network Scans
Passwords
Pentest/Social
Personal and Productivity
Python
Reporting and Documentation
Resources and Standards
Reverse Engineering
SAST and Secret Scanning
Utility
Wordlists and Parsing
Stars
🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.
Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.
Fetch all the URLs that the Wayback Machine knows about for a domain
Scan for misconfigured S3 buckets across S3-compatible APIs!
A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.
Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
Accept URLs on stdin, replace all query string values with a user-supplied value
Fetches javascript file from a list of URLS or subdomains.
Golang client for querying SecurityTrails API data
A fuzzer for finding anomalies and analyzing how servers respond to different HTTP headers
The Most Advanced Client-Side Prototype Pollution Scanner
ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.
A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representations in Go.