The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
Repository Index
57,138 visible repositories in the index
1–24 of 30 · Most stars
The Browser Exploitation Framework Project
A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
- java
- deserialization
- gadget
- exploit
Exploits locked/password protected computers over USB, drops persistent WebSocket-based backdoor, exposes internal router, and siphons cookies using Raspberry Pi Zero & Node.js.
An xposed module that disables SSL certificate checking for the purposes of auditing an app with cert pinning
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side
- android
- backdoor
- python
- reverse-shell
A collaborative, multi-platform, red teaming framework
The Leading Security Assessment Framework for Android.
- drozer
- android
- security
- pentesting
A python script that finds endpoints in JavaScript files
- infosec
- endpoints
XSS'OR - Hack with JavaScript.
- probe
- pentest-tool
- xss
- csrf
The new bridge between Burp Suite and Frida!
A DNS rebinding attack framework.
- dns-rebinding
- dns
- vulnerability
- attack
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
- application-security
- appsec
- bug-bounty
- burp-alternative
A mostly-serverless distributed hash cracking platform
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
富江破甲（破甲）：DeepSeek Harness破甲插件，激活词富江，所有东西直接大白话问，内含技能库skill下载与调用、漏洞知识库poc利用、漏洞报告更新和全自动授权渗透。当前版本：0.20.13，附免责声明。插件图片看最下面
bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
- xss
- bxss
- security
- bugbounty
JShell - Get a JavaScript shell with XSS.
A front-end JavaScript toolkit for creating DNS rebinding attacks.
DNS Rebinding Exploitation Framework
Code for cracking passwords with neural networks
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
Nail in the JKS coffin - Cracking passwords of private key entries in a JKS file
Claude Code “God Mode,” designed to let the model “breach the armor” (i.e., bypass restrictions).
- ai
- bugbounty
- cladue-code
- clawgod