Open-Source API Development Ecosystem • https://hoppscotch.io • Offline, On-Prem & Cloud • Web, Desktop & CLI • Open-Source Alternative to Postman, Insomnia

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Presentation Slides for Developers

Open-source KVM software

A tool for reverse engineering Android apk files

Turn (almost) any Python command line program into a full GUI application with one line

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

Classy web-development dressed in a DSL (official / canonical repo)

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

CodiMD - Realtime collaborative markdown notes on all platforms.

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

⚓️ Easily test HTTP webhooks with this handy tool that displays requests instantly.

HTTP parameter discovery suite.

Handwriting Synthesis with RNNs ✏️

Web-based SQLite database browser written in Python

Educational, CTF-styled labs for individuals interested in Memory Forensics

LDAP Client and Server API for node.js

Prototype Pollution and useful Script Gadgets

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Driver for Realtek 8852AE, an 802.11ax device

Web-app for processing, logging and visualising energy, temperature and other environmental data

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

Curated and well-maintained hostfile to block ads, tracking, cryptomining, and more! Updated regularly. ⚡🔒

A Model Context Protocol server that provides read-only access to MySQL databases. This server enables LLMs to inspect database schemas and execute read-only queries.

Differential testing framework for HTTP implementations

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submissio…

Tool to check for dependency confusion vulnerabilities in multiple package management systems

kCTF is a Kubernetes-based infrastructure for CTF competitions. For documentation, see

Simple DNS Rebinding Service