Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Project Tauro

A Router WiFi key recovery/cracking tool with a twist.

✭ 52

java hacking hacking-tool web-scraping web-security network-security web-scraper wifi-security

Waf A Mole

A guided mutation-based fuzzer for ML-based Web Application Firewalls

✭ 51

python machine-learning web web-security

Prestashop Cve 2018 19126

PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)

✭ 37

exploit web-security

Resources For Beginner Bug Bounty Hunters

A list of resources for those interested in getting started in bug bounties

✭ 7,185

hacking education pentest xss bug-bounty web-security hackers ssrf bug-bounty-hunters learn2hack

Openftp4

A list of all FTP servers in IPv4 that allow anonymous logins.

✭ 634

ftp web-security

Articles Translator

📚Translate the distinct technical blogs. Please star or watch. Welcome to join me.

✭ 606

javascript css react vue security webpack web npm security-tools pwa article web-security memory-management parcel

Corscanner

Fast CORS misconfiguration vulnerabilities scanner🍻

✭ 601

python python3 vulnerability-scanners cors web-security

Favfreak

Making Favicon.ico based Recon Great again !

✭ 564

python hacking osint bugbounty reconnaissance recon information-gathering web-security

Twa

A tiny web auditor with strong opinions.

✭ 549

shell security web-security auditing

Githacker

🕷️ A Git source leak exploit tool that restores the entire Git repository, including data from stash, for white-box auditing and analysis of developers' mind

✭ 524

python git web-security

Burpa

Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).

✭ 427

python security automation devops security-tools security-scanner security-automation burpsuite web-security

Lookyloo

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other.

✭ 381

python privacy scraping dfir capture information-security web-security

Taipan

Web application vulnerability scanner

✭ 359

security web hacking security-tools hacking-tool security-audit web-application security-scanner security-automation web-security application-security security-testing

Ssrf vulnerable lab

This Lab contain the sample codes which are vulnerable to Server-Side Request Forgery attack

✭ 361

hacking exploitation attack web-security lab

Javaid

java source code static code analysis and danger function identify prog

✭ 327

python web-security

Awesome Web Hacking

A list of web application security

✭ 3,760

hacking penetration-testing scanner vulnerabilities metasploit web-security web-hacking hacking-tools

Ctftools

Personal CTF Toolkit

✭ 312

hacking hacking-tool ctf-tools web-security

Shell Backdoor List

🎯 PHP / ASP - Shell Backdoor List 🎯

✭ 288

shell hack c99 web hacking backdoor asp-net web-security websecurity

WDIR

Good resources about web security that I have read.

✭ 14

tools hacking web-security bugbounty web-security-research bugbountytips bugbounty-writeups

Raven-Storm

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

UltimateCMSWordlists

📚 An ultimate collection wordlists of the best-known CMS

✭ 54

wordpress cms security drupal dictionary hacking wordlist joomla fuzzing web-security cms-framework fuzz web-security-research

Sherlock

This script is designed to help expedite a web application assessment by automating some of the assessment steps (e.g., running nmap, sublist3r, metasploit, etc.)