The ZAP by Checkmarx Core project

cSploit - The most complete and advanced IT security professional toolkit on Android.

Aircrack, Airodump, Aireplay, MDK3 and Reaver GUI Application for Android

A cross-platform java application for decoding, monitoring, recording and streaming trunked mobile and related radio protocols using Software Defined Radios (SDR). Website:

Burp Bounty (Scan Check Builder in BApp Store) is a extension of Burp Suite that allows you, in a quick and simple way, to improve the active and passive scanner by means of personalized rules thro…

OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within an image file. b) Watermarking: Watermarking image files with an invisible si…

Burp plugin able to find reflected XSS on page in real-time while browsing on site

Vulnerability scanner based on vulners.com search API

TLS-Attacker is a Java-based framework for analyzing TLS libraries. It can be used to manually test TLS clients and servers or as as a software library for more advanced tools.

👁️ (s)AINT is a Spyware Generator for Windows systems written in Java. [Discontinued]

Advanced Graphical User Interface for NMap

Droidefense: Advance Android Malware Analysis Framework

psychoPATH - an advanced path traversal tool. Features: evasive techniques, dynamic web root list generation, output encoding, site map-searching payload generator, LFI mode, nix & windows support,…

A PoC Java Stager which can download, compile, and execute a Java file in memory.

Burp Suite JS Beautifier

Automatic XSS filter bypass

Exploit code developed/reproduced by me

Lightweight remote administrative client written in Java.

A Remote Administration Tool written in Java

psychoPATH - hunting file uploads & LFI in the dark. This tool is a highly configurable payload generator detecting LFI & web root file uploads. Involves advanced path traversal evasive techniques,…

👁️ (s)AINT is a Spyware Generator for Windows systems written in Java.

cSploit - The most complete and advanced IT security professional toolkit on Android.

A mobile app for detecting bluetooth gas pump credit card skimmers

Burp Bounty is a extension of Burp Suite that improve an active and passive scanner by yourself. This extension requires Burp Suite Pro.

Droidefense: Advance Android Malware Analysis Framework

SHELLING - a comprehensive OS command injection payload generator

Automatic XSS filter bypass

Advanced Graphical User Interface for NMap

OpenStego is a steganography application that provides two functionalities: a) Data Hiding: It can hide any data within a cover file (e.g. images). b) Watermarking: Watermarking files (e.g. images)…

The OWASP ZAP core project