ai-weblens

The AI-Powered Web Classification Solution

akto

Proactive, Open source API security → API discovery, Testing in CI/CD, Test Library with 150+ Tests, Add custom tests, Sensitive data exposure

awesome-osint

:scream: A curated list of amazingly awesome OSINT

awesome-web-security

🐶 A curated list of Web Security materials and resources.

awesome-yara

A curated list of awesome YARA rules, tools, and people.

bluetooth-le-spam

bypass-403-forbidden

bypassing 403!, use automated workflow to do that >

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

cve-2023-38831-rarce

An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23

cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

cvemap

Navigate the CVE jungle with ease.

cybernetfuzz

Efficiently discover and scan a web app's content for common vulnerabilities. Identify potential SQL injection, SSRF, XSS, and more.

ditial-care

Welcome to the Digital Care system repository!

encryption-assignment

mahmood hodiesh assignment

flutter-spy

Explore, analyze, and gain valuable data & insights from reverse engineered Flutter apps.

forbidden-buster

A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk.

gsec

Web Security Scanner

hacktronian

Tools for Pentesting

howtohunt

Collection of methodology and test case for various web vulnerabilities.

install-armitage-on-linux

This is a program that will install Metasploit-Framework and Armitage on to any Debian-based Linux Distro (it can also be adapted to work on Mac). This was made possible using a combination of my own code, darkoperator's, and a nightly Metasploit installer from rapid7.

lebask-flutter-project-

Clothing app branched into four apps (customer, delivery, admin, store) used Firebase auth, Firebase cloud firestore, Firebase storage, Google Maps and flutter

mosint

An automated e-mail OSINT tool

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

public-pentesting-reports

A list of public penetration test reports published by several consulting firms and academic security groups.

securedns

Check for misconfiguration of a subdomain Names

sliverc2-forensics

A collection of tools and detections for the Sliver C2 Frameworj

springboot-scan

针对SpringBoot的开源渗透框架，以及Spring相关高危漏洞利用工具

subdomain_bruteforcer

use a custom word list to brute force subdomains if available

theharvester

E-mails, subdomains and names Harvester - OSINT

thisshehab

Profile