The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
Build high-quality LLM apps - from prototyping, testing to production deployment and monitoring.
A utility for mocking out the Python Requests library.
- tag-production
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Bleeding edge django template focused on code quality and security.
Open-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.
- ai-gateway
- observability
- simulation
- ai-agents
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Simple and powerful factories for mock data generation
- pydantic
- python
- dataclasses
- starlite
Hercules is the world’s first open-source testing agent, enabling UI, API, Security, Accessibility, and Visual validations – all without code or maintenance. Automate testing effortlessly and let Hercules handle the heavy lifting! ⚡
- ai
- autogen
- automation
- browser
a socket mock framework - for all kinds of socket animals, web-clients included
Attacking MQTT systems with Mosquittos (scalability and load testing utilities for MQTT environments)
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
Realistic synthetic events for testing, demos, and pipelines — streamed live or generated in bulk
- clickhouse
- data-engineering
- data-generation
- devops
Selenium webdriver step library for use with the behave BDD testing framework
- selenium-webdriver
- webdriverio
- behave
- bdd
A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process
⚡ JEval helps you to evaluate your JMeter test plan and provides recommendation before you start your performance testing. All contributions welcome 🙏.
- jmeter
- python
- performance
- performance-testing
Enterprise-grade platform to generate and execute Cypress, Playwright, WebdriverIO, and Appium end-to-end tests from natural language requirements. (Appium is experimental and requires external mobile infrastructure.)
An E2E tutorial to create a video game controller by creating a custom pose classifier using TF Lite.
Intelligent web page comparison tool with Wayback Machine support and visual regression testing
- visual-comparison
- wayback-machine
- web-scraping
- diff