A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
Web path scanner
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
The recursive internet scanner for hackers. 🧡
An all-in-one hacking tool to remotely take over Android devices.
Dark Web OSINT Tool
Automated NoSQL database enumeration and web application exploitation tool.
Like nmap for mapping wifi networks you're not connected to, plus device tracking
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Hacking Toolkit
Security Auditor Utility for GraphQL APIs
DDoS attacks over Tor
Mock an SSH server and define all commands it supports (Python, Twisted)
IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]
Capture The Flag competition challenge write-ups