CONSTANTIN-DX30

wire

gRPC and protocol buffers for Android, Kotlin, Swift and Java.

AndroidPentest101

The motive to build this repo is to help beginner to start learn Android Pentesting by providing a roadmap.

awesome-api-security

A collection of awesome API Security tools and resources. The focus goes to open-source tools and resources that benefit all the community.

XSSearch

XSSearch is a comprehensive reflected XSS tool built on selenium framework in python language. It contains more than 3000 payloads for automating XSS attacks and validating XSS endpoint

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.

gauplus

bugbounty-cheatsheet

A list of interesting payloads, tips and tricks for bug bounty hunters.

gaussrf

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl and Filter Urls With OpenRedirection or SSRF Parameters.

gau

Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.

gocrawler

NoXss

Faster xss scanner,support reflected-xss and dom-xss

vulmap

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

Parth

Heuristic Vulnerable Parameter Scanner

pwn_jenkins

Notes about attacking Jenkins servers

OAUTHScan

Burp Suite Extension useful to verify OAUTHv2 and OpenID security

autorize

Automatic authorization enforcement detection extension for burp suite written in Jython developed by Barak Tawily in order to ease application security people work and allow them perform an automatic authorization tests

Web-Cache-Vulnerability-Scanner

Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hackmanit.de/).

HackBar

HackBar plugin for Burpsuite

PortInjection

this is tools hacking for scan vuln in port web, happy using

WordList

goHackTools

Hacker tools on Go (Golang)

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

wfuzz

Web application fuzzer

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

netdiscover

Netdiscover, ARP Scanner (official repository)

CrackMapExec

A swiss army knife for pentesting networks

Beginner-Network-Pentesting

Notes for Beginner Network Pentesting Course

VulnLab

SSRF_Vulnerable_Lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack