decks749's Stars
shroudedcode/apk-mitm
🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection
evyatarmeged/Raccoon
A high performance offensive security tool for reconnaissance and vulnerability scanning
TheHackerDev/race-the-web
Tests for race conditions in web applications. Includes a RESTful API to integrate into a continuous integration pipeline.
flipkart-incubator/watchdog
Watchdog - A Comprehensive Security Scanning and a Vulnerability Management Tool.
mlconnor/phantalyzer
A PhantomJS script for running Wappalyzer over many sites using a headless Webkit browser
jobertabma/ground-control
A collection of scripts that run on my web server. Mainly for debugging SSRF, blind XSS, and XXE vulnerabilities.
RhinoSecurityLabs/SleuthQL
Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
threat9/routersploit
Exploitation Framework for Embedded Devices
D35m0nd142/LFISuite
Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner
n1nj4sec/mimipy
port of mimipenguin.sh in python with some additional protection features
hannob/snallygaster
Tool to scan for secret files on HTTP servers
sfan5/fi6s
IPv6 network scanner designed to be fast
nahamsec/lazyrecon
This script is intended to automate your reconnaissance process in an organized fashion
Kevin-Robertson/Inveigh
.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
Metnew/uxss-db
🔪Browser logic vulnerabilities :skull_and_crossbones:
stevenvachon/broken-link-checker
Find broken links, missing images, etc within your HTML.
x90skysn3k/brutespray
Bruteforcing from various scanner output - Automatically attempts default creds on found services.
initstring/linkedin2username
OSINT Tool: Generate username lists for companies on LinkedIn
OpenRCE/sulley
A pure-python fully automated and unattended fuzzing framework.
RUB-NDS/CORStest
A simple CORS misconfiguration scanner
jobertabma/relative-url-extractor
A small tool that extracts relative URLs from a file.
hdm/nextnet
nextnet is a pivot point discovery tool written in Go.
markclayton/bumpster
The Unofficial Burp Extension for DNSDumpster.com
cloudtracer/paskto
Paskto - Passive Web Scanner
hwdsl2/setup-ipsec-vpn
Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
nashcontrol/bounty-monitor
Leverage certificate transparency live feed to monitor for newly issued subdomain certificates (last 90 days, configurable), for domains participating in bug bounty programs.
nccgroup/AutoRepeater
Automated HTTP Request Repeating With Burp Suite
WithSecureLabs/drozer
The Leading Security Assessment Framework for Android.
Gallopsled/pwntools
CTF framework and exploit development library
hasherezade/pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).