Automatic SQL injection and database takeover tool
- sql-injection
- detection
- exploitation
- python
Repository Index
86,076 visible repositories in the index
1–21 of 21 · Most stars
The ZAP by Checkmarx Core project
- zap
- zap-development
- dast
- appsec
The Browser Exploitation Framework Project
Credentials recovery project
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Automated Αll-in-One OS command injection exploitation tool.
- python
- command-injection
- detection
- exploitation
TranslatedAntSword is a cross-platform website management toolkit.
- antsword
Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.
- csharp
- situational-awareness
An OOB interaction gathering server and client library
Neo-reGeorg is a project that seeks to aggressively refactor reGeorg
- regeorg
- neoreg
- reduh
- socks-proxy
Ettercap Project
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
- pentesting
- fuzzing
- bruteforce
- bugbounty
The SpecterOps project management and reporting engine
- reporting
- penetration-testing
- red-team
- informationsecurity
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses
- owasp
- api-security
- security
- bugbounty
This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project.
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
BLE Edition of the original FistBump (portable WPA handshake grabber)
Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries