A collection of various awesome lists for hackers, pentesters and security researchers
Repository Index
47,133 repositories indexed
1–24 of 48 · Most stars
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Web path scanner
OSS-Fuzz - continuous fuzzing for open source software.
Foundry is a blazing fast, portable and modular toolkit for Ethereum application development written in Rust.
The property-based testing library for Python
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
- afl
- afl-fuzz
- afl-fuzzer
- fuzzing
syzkaller is an unsupervised coverage-guided kernel fuzzer
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
- awesome-list
- awesome
- fuzzing
- fuzzing-framework
Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
- phishing
- typosquatting
- domains
- dns
Randomized testing for Go
A high performance offensive security tool for reconnaissance and vulnerability scanning
- reconnaissance
- scanner
- vulnerability-assessment
- vulnerability-scanner
An step by step fuzzing tutorial. A GitHub Security Lab initiative
Catch API bugs before your users do
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
A fork and successor of the Sulley Fuzzing Framework
DOM fuzzer
Automated testing to find logic and performance bugs in database systems
A curated list of awesome Fuzzing(or Fuzz Testing) for software security
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
a list of awesome resources related to security and hacking of VoIP, WebRTC and VoLTE
- awesome-lists
- voip-security
- hacking-voip
- sip-security