decks749

decks749's Stars

• shroudedcode/apk-mitm

  🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

  Language:TypeScript3.8k343

• evyatarmeged/Raccoon

  A high performance offensive security tool for reconnaissance and vulnerability scanning

  Language:Python3.1k396

• TheHackerDev/race-the-web

  Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.

  Language:Go58465

• flipkart-incubator/watchdog

  Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.

  Language:Python410103

• mlconnor/phantalyzer

  A PhantomJS script for running Wappalyzer over many sites using a headless Webkit browser

  Language:JavaScript4314

• jobertabma/ground-control

  A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.

  Language:Ruby528111

• RhinoSecurityLabs/SleuthQL

  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

  Language:Python46484

• threat9/routersploit

  Exploitation Framework for Embedded Devices

  Language:Python12.1k2.3k

• D35m0nd142/LFISuite

  Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

  Language:Python1.7k387

• n1nj4sec/mimipy

  port of mimipenguin.sh in python with some additional protection features

  Language:Python20337

• hannob/snallygaster

  Tool to scan for secret files on HTTP servers

  Language:Python2k228

• sfan5/fi6s

  IPv6 network scanner designed to be fast

  Language:C16325

• nahamsec/lazyrecon

  This script is intended to automate your reconnaissance process in an organized fashion

  Language:Shell1.9k567

• Kevin-Robertson/Inveigh

  .NET IPv4/IPv6 machine-in-the-middle tool for penetration testers

  Language:C#2.5k439

• Metnew/uxss-db

  🔪Browser logic vulnerabilities :skull_and_crossbones:

  Language:HTML68491

• stevenvachon/broken-link-checker

  Find broken links, missing images, etc within your HTML.

  Language:JavaScript1.9k300

• x90skysn3k/brutespray

  Bruteforcing from various scanner output - Automatically attempts default creds on found services.

  Language:Go2k378

• initstring/linkedin2username

  OSINT Tool: Generate username lists for companies on LinkedIn

  Language:Python1.2k181

• OpenRCE/sulley

  A pure-python fully automated and unattended fuzzing framework.

  Language:Python1.4k338

• RUB-NDS/CORStest

  A simple CORS misconfiguration scanner

  Language:Python400102

• jobertabma/relative-url-extractor

  A small tool that extracts relative URLs from a file.

  Language:Ruby718117

• hdm/nextnet

  nextnet is a pivot point discovery tool written in Go.

  Language:Go44555

• markclayton/bumpster

  The Unofficial Burp Extension for DNSDumpster.com

  Language:Python707

• cloudtracer/paskto

  Paskto - Passive Web Scanner

  Language:JavaScript15043

• hwdsl2/setup-ipsec-vpn

  Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2

  Language:Shell24.9k6.3k

• nashcontrol/bounty-monitor

  Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.

  Language:Python21950

• nccgroup/AutoRepeater

  Automated HTTP Request Repeating With Burp Suite

  Language:Java839106

• WithSecureLabs/drozer

  The Leading Security Assessment Framework for Android.

  Language:Python3.8k770

• Gallopsled/pwntools

  CTF framework and exploit development library

  Language:Python11.9k1.7k

• hasherezade/pe-sieve

  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

  Language:C++3k422