smallmeet

followers

following

stars

smallmeet's starred repositories

XSSor

XSSor is a semi-automatic reflected and persistent XSS detector extension for Burp Suite. The tool was written in Python by Barak Tawily, an application security expert. XSSor was designed to help security testers by performing semi-automatic reflected and persistent XSS detection tests.

Language:Python4400

libpywebhack

Web hacking assistance toolkit

Language:Python11200

Airachnid-Burp-Extension

A Burp Extension to test applications for vulnerability to the Web Cache Deception attack

Language:JavaGPL-3.013800

PwnBack

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

Language:JavaMIT22600

burp-extension

Repo to burpsuite extension edition

Language:Python100

Burp-Hunter

XSS Hunter Burp Plugin

Language:JavaGPL-3.014900

wapty

[ceased maintenance] An open source alternative to burp suite written in Go.

Language:GoGPL-3.015300

mec

for mass exploiting

Language:PythonGPL-3.059500

LNScan

详细的内部网络信息扫描器

Language:Python20400

Burp-Scanner-OOB-Checks

This is a Burp extension for adding additional payloads to active scanner that require out-of-band validation. Works great with XSSHunter

Language:Python2000

httprecon-nse

Advanced web server fingerprinting for Nmap

Language:LuaGPL-3.012000

scapy-docs-zh

:book: [译] Scapy 中文文档

Language:CSS3900

the-way-to-flask

【教程】Flask 入门，使用 Flask 快速构建优美、健壮和高效的 REST 应用

Language:HTMLNOASSERTION10000

spiderfoot

SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.

Language:PythonMIT1207900

Smbtouch-Scanner

Automatically scan the inner network to detect whether they are vulnerable.

Language:PythonBSD-3-Clause14200

WiFi-Pumpkin-deprecated

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

Language:Python307800

yasuo

A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network

Language:RubyGPL-3.056800

notes

Some public notes

Cyber-Defence

Information released publicly by NCC Group's Cyber Incident Response Team

Language:Python47100

patator

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.

Language:PythonGPL-2.0349300

strutsy

Strutsy - Mass exploitation of Apache Struts (CVE-2017-5638) vulnerability

Language:PythonMIT1100

php-static-analysis-tools

A reviewed list of useful PHP static analysis tools

NOASSERTION280200

payloads

Git All the Payloads! A collection of web attack payloads.

Language:ShellGPL-3.0355400

electron-anyproxy

📢 A http/https proxy client, using to analyze and mock.

Language:JavaScriptMIT64400

hakbot-origin-controller

Vendor-Neutral Security Tool Automation Controller (over REST)

Language:Java3000

burp-ui

Burp-UI is a web-ui for burp backup written in python with Flask and jQuery/Bootstrap

Language:PythonBSD-3-Clause8400

securitybot

Distributed alerting for the masses!

Language:PythonApache-2.099200

burpdeveltraining

Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"

Language:JavaNOASSERTION34600

awesome-hacking

A curated list of awesome Hacking tutorials, tools and resources

MIT1237200

FileSensor

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

Language:Python25300