Most advanced XSS scanner.
- xss
- xss-scanner
- xss-exploit
- xss-bruteforce
Repository Index
47,133 repositories indexed
1–24 of 27 · Most stars
OSS-Fuzz - continuous fuzzing for open source software.
AFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!
- afl
- afl-fuzz
- afl-fuzzer
- fuzzing
syzkaller is an unsupervised coverage-guided kernel fuzzer
Randomized testing for Go
Security oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW based)
RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
Automated testing to find logic and performance bugs in database systems
Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.
Security analysis toolkit for proprietary car protocols
- carhacking
- automotive-security
- reverse-engineering
Full-featured test framework for Go! Assertions, fuzzing, input testing, output capturing, and much more! 🍕
- testing
- testing-framework
- go
- golang
Fuzzer for Linux Kernel Drivers
Set of tools for security testing of Internet of Things devices using specific network IoT protocols
Owi: Seamless program analysis for C, C++, Go, Haskell, LLVM, Rust, Wasm and Zig.
FANS: Fuzzing Android Native System Services
A generic fuzzing and delta-debugging framework
A coverage-guided REST API fuzzer developed on top of LibAFL
- api-fuzzer
- fuzzer
- fuzzing
- rest-api-test
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
- ipv6
- security-assessments
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
🤖 Repeat tests. Repeat tests. Repeat tests.
- testing
- test
- test-automation
- data-driven
a concolic testing engine for Java
Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.
- cybersecurity
- hacking
- iast
- dast
The repository host gives no description.
Fragscapy is a command-line tool to fuzz network protocols by automating the modification of outgoing network packets. It can run multiple successive tests to determine which options can be used to evade firewalls and IDS.