A list of web application security
- penetration-testing
- web-hacking
- vulnerabilities
- scanner
47,133 repositories indexed
25–48 of 78 · Most stars
A list of web application security
Infection Monkey - An open-source adversary emulation platform
Next generation web scanner
An all-in-one hacking tool to remotely take over Android devices.
An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.
A curated list of awesome infosec courses and training resources.
The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
Cameradar hacks its way into RTSP videosurveillance cameras
Automated NoSQL database enumeration and web application exploitation tool.
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Automated Security Testing For REST API's
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
The Offensive Manual Web Application Penetration Testing Framework.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
ARTEX - AI autonomous penetration testing system (English translation)
Security Tool to Look For Interesting Files in S3 Buckets
Bloodhound Reporting for Blue and Purple Teams
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
A collection of AWS penetration testing junk
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Lonkero - Wraps around your attack surface. Professional-grade scanner for real penetration testing. Fast. Modular. Rust.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
Hacking Toolkit