A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Web path scanner
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
The recursive internet scanner for hackers. 🧡
Scanning APK file for URIs, endpoints & secrets.
- mobile-security
- android-security
- reverse-engineering
- bugbounty
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Security Tool to Look For Interesting Files in S3 Buckets
- s3-bucket
- penetration-testing
- bugbounty
- enumeration
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- security-audit
- penetration-testing
- penetration-test
- virtual-hosts
Automated Red Team Infrastructure deployement using Docker
Retrieve missing Readarr books from Library Genesis.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
🕸️ Blazing fast GraphQL endpoints finder using subdomain enumeration, scripts analysis and bruteforce. 🕸️
Example repository for GitHub Actions Time of Check to Time of Use (TOCTOU vulnerabilities)
- actions
- bugbounty
- cicd
Fetch and normalize parameterized URLs from the Wayback CDX API (OSINT, inspired by ParamSpider).
- bugbounty
- cdx
- cli
- kali-linux
Golem Image Classifier is built using the Service API of Yapapi to interact with the Golem Network (golem.network). Built as part of a Gitcoin Bounty
- machine-learning
- golem
- yagna