A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–24 of 138 · Most stars
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
Set up a personal VPN in the cloud
The authentication glue you need.
open-source agentic AI data assistant for the next generation of AI + Data products.
Daemon to ban hosts that cause multiple authentication errors
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
This repo hosts Prowler OSS (CLI and Local Server). Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment for Humans and AI Agents.
Web path scanner
The Rogue Access Point Framework
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
🐶 A curated list of Web Security materials and resources.
Exploitation Framework for Embedded Devices
Scapy: the Python-based interactive packet manipulation program & library.
Main Sigma Rule Repository
🛡️ Open-source and cloud-native Web Application Firewall (WAF)
Low code web framework for real world applications, in Python and Javascript
📱 objection - runtime mobile exploration
Malicious traffic detection system
Bandit is a tool designed to find common security issues in Python code.
Multi-Cloud Security Auditing Tool