The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
Repository Index
55,640 visible repositories in the index
1–24 of 37 · Most stars
Write scalable load tests in plain Python 🚗💨
- locust
- python
- load-testing
- performance-testing
ARTEMIS turns natural-language instructions into reliable Android automation. It automates end-to-end workflows, captures logs, and integrates seamlessly with AI coding assistants such as Antigravity, Codex, and Claude Code. It also achieves 99%+ success rate on AndroidWorld Benchmark.
- ai-agents
- android
- test-automation
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
- unit-testing
- test
- testing
- python
A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
Scalable fuzzing infrastructure.
Mimesis is a Python library for generating fake but realistic data in multiple languages and locales.
- mimesis
- fake
- data
- generator
Catch API bugs before your users do
Automatically mock your HTTP interactions to simplify and speed up testing
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Bleeding edge django template focused on code quality and security.
Automated Integration Testing and Live Documentation for your API
- python3
- python-package
- pypi-packages
- scanapi
Tools for various online judges. Downloading sample cases, generating additional test cases, testing your code, and submitting it.
- competitive-programming
- automation
- scraping
- atcoder
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Wallet UI simulation tool for BTC, ETH, SOL, XRP, and 200+ assets. Customize displayed balances in a controlled demo environment with persistent visual settings and screenshot-ready previews. Designed for testing, demonstrations, and UI prototyping without altering actual blockchain balances or transactions.
- bitcoin-transaction-tool
- browser-crypto-wallet
- crypto-broadcast-api
- electrum-payment
Security analysis toolkit for proprietary car protocols
- carhacking
- automotive-security
- reverse-engineering
Experimental Darling runtime patches and tools for testing the macOS League client on Linux
We well know GANs for success in the realistic image generation. However, they can be applied in tabular data generation. We will review and examine some recent papers about tabular GANs in action.
- tabular-data
- gans
- train-dataframe
- adversarial-filtering
Suricata, Snort and Zeek IDS rule and pcap testing system
Browser automation engine benchmark - Test bypass rates, performance & stealth against Cloudflare, DataDome, reCAPTCHA, Kasada, Imperva, Akamai, PerimeterX and other bot detection systems. Find the best browser for scraping.
- anti-detect
- antidetect-browser
- automation
- browser
Wraps any WSGI application and makes it easy to send test requests to that application, without starting up an HTTP server.
a socket mock framework - for all kinds of socket animals, web-clients included
Attacking MQTT systems with Mosquittos (scalability and load testing utilities for MQTT environments)