All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

Easily upload files (Multipart/Binary/FTP out of the box) in the background with progress notification. Support for persistent upload requests, customizations and custom plugins.

a socket mock framework - for all kinds of socket animals, web-clients included

An intellectual (HTTP/HTTPS) web server with support for server side templating (Crush, Apache Velocity and JTwig)

Apache Guacamole installation bash script for RHEL 7 and CentOS 7 including options for Nginx, HTTPS, SSL, LDAP, Let's Encrypt certificates and more

🔒 Memorable site for testing clients against bad SSL configs.

Advanced Reconnaissance tool to enumerate attacking surface of the target.

低门槛跨入Https大门！网站ssl证书自动生成工具（http到https的转变），燥起来吧！

Sudomy is a subdomain enumeration tool to collect subdomains and analyzing domains performing automated reconnaissance (recon) for bug hunting / pentesting

CryptoNice is both a command line tool and library which provides the ability to scan and report on the configuration of SSL/TLS for your internet or internal facing web services. Built using the sslyze API and ssl, http-client and dns libraries, cryptonice collects data on a given domain and performs a series of tests to check TLS configuration…

Pentest: Subdomains enumeration tool for penetration testers.

《深入浅出HTTPS：从原理到实战》代码示例、勘误、反馈、讨论

🔐 Tutorial of setting up Security for your API with one way authentication with TLS/SSL and mutual mutual authentication for a java based web server and a client with both Spring Boot. Different clients are provided such as Apache HttpClient, OkHttp, Spring RestTemplate, Spring WebFlux WebClient Jetty and Netty, the old and the new JDK HttpClient, the old and the new Jersey Client, Google HttpClient, Unirest, Retrofit, Feign, Methanol, vertx, Scala client Finagle, Featherbed, Dispatch Reboot, AsyncHttpClient, Sttp, Akka, Requests Scala, Http4s Blaze, Kotlin client Fuel, http4k, Kohttp and ktor. Also other server examples are available such as jersey with grizzly. Also gRPC examples are included

Privacy Online Test and Resource Compendium (POTARC) 🕵🏻

💔 Archived list of domains using Cloudflare DNS at the time of the CloudBleed announcement.

Easy-to-use auto-SSL reverse proxy as a Docker container based on Caddy and Let’s Encrypt

SSL Scanner written in Crystal

Cheroot is the high-performance, pure-Python HTTP server used by CherryPy. Docs -->

⚙️ NGINX config generator on steroids 💉

Tipi - the All-in-one Web Server for Ruby Apps