The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
Repository Index
47,133 repositories indexed
1–24 of 39 · Most stars
Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
The pytest framework makes it easy to write small tests, yet scales to support complex functional testing
- unit-testing
- test
- testing
- python
Mimesis is a Python library for generating fake but realistic data in multiple languages and locales.
- mimesis
- fake
- data
- generator
A light-weight, flexible, and expressive statistical data testing library
- pandas
- validation
- schema
- dataframes
Command line driven CI frontend and development task automation tool.
- testing
- python
- virtualenv
- continuous-integration
A test fixtures replacement for Python
- hacktoberfest
- django
- sqlalchemy
- python
Load and performance benchmark tool
- python
- load-testing
- performance
- performance-test
Playwright that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection, Python web scraping and browser automation.
- datadome
- perimeterx
- akamai
- antidetect-browser
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Flexible test automation for Python
- python
- testing
- automation
Make continuous deployment safe by comparing before and after webpage screenshots for each release. Depicted shows when any visual, perceptual differences are found. This is the ultimate, automated end-to-end test.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Mock HTTPX with awesome request patterns and response side effects 🦋
Bluetooth experimentation framework for Broadcom and Cypress chips.
Ruby test runner for Sublime Text with Minitest, Test::Unit, RSpec, and Cucumber support, single-test execution, and code/test switching.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Browser automation engine benchmark - Test bypass rates, performance & stealth against Cloudflare, DataDome, reCAPTCHA, Kasada, Imperva, Akamai, PerimeterX and other bot detection systems. Find the best browser for scraping.
- anti-detect
- antidetect-browser
- automation
- browser
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
Automating captcha solving for Playwright. Supports Cloudflare Turnstile & Interstitial, and reCAPTCHA V2 & V3 with Click-based or API (2captcha) solving. Designed for easy integration with Playwright, Patchright, and Camoufox.
- automation
- bot
- camoufox
- captcha
A lightweight Python SDK and CLI for evaluating recursive self-improvement (RSI) methods across agent benchmarks.