A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–22 of 22 · Most stars
PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)
E-mails, subdomains and names Harvester - OSINT
In-depth attack surface mapping and asset discovery
Web path scanner
Fast passive subdomain enumeration tool.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Fast subdomains enumeration tool for penetration testers
The recursive internet scanner for hackers. 🧡
A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)
A high performance offensive security tool for reconnaissance and vulnerability scanning
Automated NoSQL database enumeration and web application exploitation tool.
Reconnaissance Swiss Army Knife
The Offensive Manual Web Application Penetration Testing Framework.
Security Tool to Look For Interesting Files in S3 Buckets
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Reflection for enumerations in Objective-C.
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
A C# source generator to create an enumeration class from an enum type. With this package, you can work on enums very, very fast without using reflection.
An Fast, Intuitive and Type-Safe C++ Enumeration Support Library
Enumeration list for CakePHP
automatic enumeration and maintenance of Suricata monitoring interfaces