The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
Repository Index
61,275 visible repositories in the index
1–24 of 52 · Most stars
The Browser Exploitation Framework Project
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- java
- deserialization
- gadget
- exploit
🎤⌨️ Acoustic keyboard eavesdropping
- acoustic
- microphone-audio-capture
- eavesdrop
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
A collaborative, multi-platform, red teaming framework
TranslatedAntSword is a cross-platform website management toolkit.
- antsword
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
P4wnP1 A.L.O.A. by MaMe82 is a framework which turns a Rapsberry Pi Zero W into a flexible, low-cost platform for pentesting, red teaming and physical engagements ... or into "A Little Offensive Appliance".
A repository with 3 tools for pwn'ing websites with .git repositories available
Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique presented by David Kennedy (TrustedSec) and Josh Kelly at Defcon 18.
The repository host gives no description.
cSploit - The most complete and advanced IT security professional toolkit on Android.
Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
- file-infector
- bdf
- python
- capstone
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
The new bridge between Burp Suite and Frida!
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf