47,133 repositories indexed
1–11 of 11 · Most stars
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
w3af: web application attack and audit framework, the open source web vulnerability scanner.
Automated NoSQL database enumeration and web application exploitation tool.
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
Hacking Toolkit
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
BLE Edition of the original FistBump (portable WPA handshake grabber)