AssetViz simplifies the visualization of subdomains from input files, presenting them as a coherent mind map. Ideal for penetration testers and bug bounty hunters conducting reconnaissance, AssetV…

Automated Security Testing For REST API's

A simple web app that helps developers understand the ASVS requirements.

OWASP Application Security Verification Standard 4.0 Checklist

Adversary Tactics - PowerShell Training

Quick SQLMap Tamper Suggester

A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.

Small and highly portable detection tests based on MITRE's ATT&CK.

Evading WinDefender ATP credential-theft

Web app that provides basic navigation and annotation of ATT&CK matrices

A set of tools, procedures, and playbooks for performing bug bounties

Best Practice Auditd Configuration

🔒 Become an Auth Boss. Learn about different authentication methodologies on the web.

🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.

Burp Extension for testing authorization issues. Automated request repeating and parameter value extraction on the fly.

This is just an semi-automated fully working, no-bs, non-metasploit version of the public exploit code for MS17-010

Auto Domain Admin and Network Exploitation.

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to…

AutoPentest-DRL: Automated Penetration Testing Using Deep Reinforcement Learning

Real time h1 scope update tool.

Web cache poisoning vulnerability scanner.

The Shadow Attack Framework

Simple shell script for automated domain recognition with some tools

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

Smart and efficient tool to automate open redirect detection at scale.

Automated HTTP Request Repeating With Burp Suite

Auto setup is a bash script compatible with Debian based distributions to install and setup necessary programs.

Utility to craft HTML smuggled files for Red Team engagements

Smart context-based SSRF vulnerability scanner.