Repository Index

Automatic SQL injection and database takeover tool

• sql-injection
• detection
• exploitation
• python

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

• ai-agents
• ai-security-tool
• autonomous-agents
• golang

Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.

Ladon大型内网渗透扫描器，PowerShell、Cobalt Strike插件、内存加载、无文件扫描。含端口扫描、服务识别、网络资产探测、密码审计、高危漏洞检测、漏洞利用、密码读取以及一键GetShell，支持批量A段/B段/C段以及跨网段扫描，支持URL、主机、域名列表扫描等。网络资产探测32种协议(ICMP\NBT\DNS\MAC\SMB\WMI\SSH\HTTP\HTTPS\Exchange\mssql\FTP\RDP)或方法快速获取目标网络存活主机IP、计算机名、工作组、共享资源、网卡地址、操作系统版本、网站、子域名、中间件、开放服务、路由器、交换机、数据库、打印机等，大量高危漏洞检测模块MS17010、Zimbra、Exchange

• scanner
• portscan
• pentest
• hacking

w3af: web application attack and audit framework, the open source web vulnerability scanner.

• scanner
• security
• appsec
• cross-site-scripting

An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws

Git All the Payloads! A collection of web attack payloads.

• payload
• payloads
• xss
• sqli

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

• burpsuite
• intruder
• payloads
• fuzz-lists

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

• rce
• ssrf
• mysql
• redis

Automated NoSQL database enumeration and web application exploitation tool.

• nosql
• nosql-databases
• penetration-testing
• scanner

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

Hack the World using Termux

• termux
• hackers
• bash-script
• termux-tool

溯光 (TrackRay) 3 beta⚡渗透测试框架（资产扫描|指纹识别|暴力破解|网页爬虫|端口扫描|漏洞扫描|代码审计|AWVS|NMAP|Metasploit|SQLMap）

• pentest
• vulnerability

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

• owasp
• api-security
• security
• bugbounty

InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.

• graphql
• security-scanner
• graphql-security
• api-documentation-tool

🔍A cutting edge context aware GraphQL API fuzzing tool!

• api-testing-framework
• graphql
• api
• automated-testing