Repository Index

Most advanced XSS scanner.

• xss
• xss-scanner
• xss-exploit
• xss-bruteforce

The property-based testing library for Python

• python
• testing
• fuzzing
• property-based-testing

Catch API bugs before your users do

• hypothesis
• pytest
• swagger
• cli

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

A fork and successor of the Sulley Fuzzing Framework

• fuzzing
• python
• security

DOM fuzzer

• fuzzing
• security
• dom

A friendly car security exploration tool for the CAN bus

• python
• can-bus
• security-scanner
• security-testing

Security analysis toolkit for proprietary car protocols

• carhacking
• automotive-security
• reverse-engineering

Code for the USENIX 2017 paper: kAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels

• fuzzing
• kernel
• intel-pt
• processor-trace

Set of tools for security testing of Internet of Things devices using specific network IoT protocols

Media Fuzzing Framework for Android

Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.

• ipv6
• security-assessments

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing

Inferred Model-based Fuzzer

• fuzzer
• kernel-fuzzing
• macos

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

A simple fuzzer for the MQTT protocol

Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.

• fuzzing
• network
• ids
• firewall

MINER provided by the paper "MINER: A Hybrid Data-Driven Approach for REST API Fuzzing"

A fuzzing utility for Android that focuses on reporting and delivery portions of the fuzzing process

A browser fuzzer augmented by API mod-ref relations

Source code release for the KRace project

The repository host gives no description.

Stream-first CAN & J1939 toolkit for security research and AI agents — typed JSONL events, CLI, TUI, fuzzing, MCP server.

• automotive-security
• can-bus
• can-bus-hacking
• can-bus-security