A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–16 of 16 · Most stars
API, CLI, and Web App for analyzing and finding a person's profile in 1000 social media \ websites
📱 objection - runtime mobile exploration
Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Automated Red Team Infrastructure deployement using Docker
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Hacking Toolkit
Autonomous pentest legion — AI commander + worker swarm + layered fact-intent graph. 3rd Tencent Intelligent Attack-Defense online champion (634 teams · 8h unattended · 1B tokens beat 4.5B). The Nüwa Test: give AIs Create/Language/History, let a civilization grow.
:hammer: Manage your website via terminal
THE MOST POWERFUL OFFENSIVE AI AGENT FOR PENTESTING , OSINT , AND ETHICAL HACKING
Routopsy - Hacking Routers with Routers
Wavestone's web interface for password cracking with hashcat
Open-source agentic security operations platform:
Capture The Flag competition challenge write-ups