ikkisoft

semgrepper

An extension to use Semgrep inside Burp Suite.

AppSecEzine

AppSec Ezine Public Repository.

mdec

Decompilation as a Service. Explore multiple decompilers and compare their output with minimal effort. Upload binary, get decompilation.

JNDI-Injection-Exploit

JNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）

2FAuth

A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes

electronegativity-action

The action integrates Electronegativity, a tool to identify misconfigurations and security anti-patterns in Electron applications, into GitHub CI/CD.

apache-openoffice-rce-via-uno-links

jquery-xss-in-html

jQuery < 3.5 Cross-Site Scripting (XSS) in html()

frida-fuzzer

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

TamperThemAll

A tampered payload generator to Fuzz Web Application Firewalls

vdexExtractor

Tool to decompile & extract Android Dex bytecode from Vdex files

muraena

Muraena is an almost-transparent reverse proxy aimed at automating phishing and post-phishing activities.

mallet

Mallet is an intercepting proxy for arbitrary protocols

electronegativity

Electronegativity is a tool to identify misconfigurations and security anti-patterns in Electron applications.

awesome-browser-exploit

awesome list of browser exploitation tutorials

mattermost-retention

Data retention /cleanup script for mattermost

BugBountySubdomains

Tools to gather subdomains from Bug Bounty programs

evilarc

Create tar/zip archives that can exploit directory traversal vulnerabilities

Keychain-Dumper

A tool to check which keychain items are available to an attacker once an iOS device has been jailbroken

SSRF-Testing

SSRF (Server Side Request Forgery) testing resources

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

qark

Tool to look for several security related Android application vulnerabilities

dharma

Generation-based, context-free grammar fuzzer. Refer to https://github.com/posidron/dharma for a maintained version.

sleepy-puppy

Deprecated please use https://github.com/Netflix/sleepy-puppy

GlobaLeaks

GlobaLeaks is free, open source software enabling anyone to easily set up and maintain a secure whistleblowing platform.

ntopng

Web-based Traffic and Security Network Traffic Monitoring

J2EEScan

J2EEScan is a plugin for Burp Suite Proxy. The goal of this plugin is to improve the test coverage during web application penetration tests on J2EE applications.