A list of open source web security scanners

Tool to analyze pcap files and extract details regarding the smb2 packets

Terraform module for MongoDB for easy provisioning and management in Kubernetes.

A PoC code for JSON Smuggling technique to smuggle arbitrary files through JSON

Automated learning of regexes for DNS discovery

The smallest (15 MB!!) docker image with Tor and Privoxy on Alpine Linux

🔱 Powerfull XSS Scanning and Parameter analysis tool&gem

Offensive Research Guide to Help Defense Improve Detection

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

A modular, reusable university course for Rust

This repo scans pypi for AWS keys

Rust Weaponization for Red Team Engagements.

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

PyNuclei is an unofficial Python library for Nuclei Scanner.

🐍 A toolkit for testing, tweaking and cracking JSON Web Tokens

A next-generation crawling and spidering framework.

🐙 Track down GitHub users.

Android Security Suite for in-depth reconnaissance and static bytecode analysis based on Ghera benchmarks.

File upload vulnerability scanner and exploitation tool.

bevigil-cli provides a unified command line interface and python library for using BeVigil OSINT API.

SCodeScanner stands for Source Code scanner where the user can scans the source code for finding the Critical Vulnerabilities.

The Evolution of a Go Programmer

Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, Th…

Scan for misconfigured S3 buckets across S3-compatible APIs!

Web Content Discovery Tool

Vulnerable REST API with OWASP top 10 vulnerabilities for security testing

A command-line tool and Rust library with Python bindings for generating regular expressions from user-provided test cases

A Unified Reconnaissance Tool for Pentesting