A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
47,133 repositories indexed
1–24 of 30 · Most stars
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Automated Penetration Testing Agentic Framework Powered by Large Language Models
Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname
- osint
- osint-python
- python3
Web path scanner
🐶 A curated list of Web Security materials and resources.
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
fsociety Hacking Tools Pack – A Penetration Testing Framework
- fsociety
- exploitation
- port-scanning
- fsociety-hacking
Infection Monkey - An open-source adversary emulation platform
- penetration-testing
- security-tools
- security-automation
- infection-monkey
An all-in-one hacking tool to remotely take over Android devices.
- adb
- android
- android-debug-bridge
- cybersecurity
Automated NoSQL database enumeration and web application exploitation tool.
- nosql
- nosql-databases
- penetration-testing
- scanner
Automated Security Testing For REST API's
- security
- restapiautomation
- python
- owasp
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Security Tool to Look For Interesting Files in S3 Buckets
- s3-bucket
- penetration-testing
- bugbounty
- enumeration
Bloodhound Reporting for Blue and Purple Teams
- active
- directory
- blueteam
- purpleteam
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
- security-audit
- penetration-testing
- penetration-test
- virtual-hosts
Hacking Toolkit
- network-analysis
- networking
- scapy
- python3
Security Auditor Utility for GraphQL APIs
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Portable, evidence-bound security skills for authorized defensive assessment, red teaming, penetration testing, detection engineering, and engagement operations.
- agent-skills
- ai-security
- blue-team
- claude-code
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
- ai-bug-bounty
- ai-bug-finder
- ai-bug-reporter
- ai-hacking
Watchtower | Self-hosted AI security assessment, asset intelligence, and evidence workflows.
- ai-agents
- attack-surface-management
- docker
- penetration-testing