Starred repositories
242
stars
written in Python
Clear filter
📚 Freely available programming books
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Automatic SQL injection and database takeover tool
Open-source AI hackers to find and fix your app’s vulnerabilities.
Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods
Exploitation Framework for Embedded Devices
Incredibly fast crawler designed for OSINT.
fsociety Hacking Tools Pack – A Penetration Testing Framework
Automated Penetration Testing Agentic Framework Powered by Large Language Models
The recursive internet scanner for hackers. 🧡
A Smart, Automatic, Fast and Lightweight Web Scraper for Python
The Unofficial TikTok API Wrapper In Python
Scanning APK file for URIs, endpoints & secrets.
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
A tool used to obfuscate python scripts, bind obfuscated scripts to fixed machine or expire obfuscated scripts.
Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-…
An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws
PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.
💀 Generate a bunch of malicious pdf files with phone-home functionality. Can be used with Burp Collaborator or Interact.sh
SMS/Email/Whatsapp/Twitter/Instagram bombers Collection 💣💣💣 💥 Also added collection of some Fake SMS utilities which helps in skip phone number based SMS verification by using a temporary phone num…
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
Automated NoSQL database enumeration and web application exploitation tool.
Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing
DDos Ripper a Distributable Denied-of-Service (DDOS) attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic
CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs
JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool