rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks

DursGo - The Go-Powered Web Application Scanner - With AI-Powered Analysis

NmapAIgility is a powerful and flexible security scanning tool that integrates Nmap and Nikto to analyze web applications for vulnerabilities. Leveraging AI capabilities, it provides insightful ana…

🏴‍☠️ Bypass Same Origin Policy with DNS-rebinding to retrieve local server files 🏴‍☠️

Scripts for solving WebSecurity Academy labs of PortSwigger using Python

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

This repo contains solution for ctf challenges

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

IDOR Forge is an advanced and versatile tool designed to detect Insecure Direct Object Reference (IDOR) vulnerabilities in web applications.

Fast and customizable subdomain wordlist generator using DSL

Subdomain takeover vulnerability checker

Exploit PoC for CVE-2024-32002

Fast and stealth WordPress scanner, no api-key, no limitation. Use the top-notch free open-source API www.wpvulnerability.net I'm looking for contributors helping me to dev an auto-exploit module.

GHOSINT - An OSINT tool based on python to get GitHub user information.

Mozilla Monitor arms you with tools to keep your personal information safe. Find out what hackers already know about you and learn how to stay a step ahead of them.

Most advanced XSS scanner.

OSINT cheat sheet, list OSINT tools, wiki, dataset, article, book , red team OSINT for hackers and OSINT tips and OSINT branch. This repository will grow every time will research, there is a resear…

how to look for Leaked Credentials !

Clone this repo to build Frida

Frida Script Runner is a versatile web-based tool designed for Android and iOS penetration testing purposes.

PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applicatio…

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

Attack Surface Management Platform

Quick SQLMap Tamper Suggester

Rockyou for web fuzzing

Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist

Impacket is a collection of Python classes for working with network protocols.