jcrashkit

grandstream_exploits

retire.js

scanner detecting the use of JavaScript libraries with known vulnerabilities

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

XSStrike

Most advanced XSS scanner.

Android

A boilerplate project for Android written in Kotlin

android-oss

Kickstarter for Android. Bring new ideas to life, anywhere.

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-wordlists

A curated list wordlists for bruteforcing and fuzzing

bounty-targets-data

This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for reports

Diggy

Extract endpoints from apk files.

docker-wordpress-letsencrypt

Wordpress Docker container using SSL Certificates with LetsEncrypt

dtd-finder

List DTDs and generate XXE payloads using those local DTDs.

govt-urls

Most government websites end in .gov or .mil, but many do not. This repo contains USA.gov's list of government URLs that don't end in .gov or .mil.

htmlunit

🕸🧰☕️Tools to Scrape Dynamic Web Content via the 'HtmlUnit' Java Library

Malware

IoT Security Reading List

nmap

Nmap - the Network Mapper. Github mirror of official SVN repository.

NodeJS-Red-Team-Cheat-Sheet

NodeJS Red-Team Cheat Sheet

nothing-to-see-here

Mostly bash functions for testing sites

OWASP-Web-Checklist

OWASP Web Application Security Testing Checklist

panizza

:pizza: Panizza is a minimalist boilerplate for using zurb's panini templating system.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

poc-graphql

Research on GraphQL from an AppSec point of view.

Red-Teaming-Toolkit

A collection of open source and commercial tools that aid in red team operations.

requests-racer

Small Python library that makes it easy to exploit race conditions in web apps with Requests.

retrofit

A type-safe HTTP client for Android and the JVM

singularity

A DNS rebinding attack framework.

WebHackersWeapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

webthing

Iot webthing using mozilla gateway for raspberry pi

wssip

Application for capturing, modifying and sending custom WebSocket data from client to server and vice versa.

ysoserial.net

Deserialization payload generator for a variety of .NET formatters