1165 Open source projects that are alternatives of or similar to Ansvif

Web Pentesting Fuzz 字典,一个就够了。

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.

coverage guided fuzz testing for java

A container repository for my public web hacks!

Web path scanner

Go Fuzzit Example

syzkaller is an unsupervised coverage-guided kernel fuzzer

Fuzzing Unification Framework

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

CLI to integrate continuous fuzzing with Fuzzit

AFL-based fuzz testing for .NET

Reverse Shell as a Service

coverage guided fuzz testing for python

Fuzz your Rust code with Google-developed Honggfuzz !

coverage guided fuzz testing for javascript

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

Network based protocol fuzzer

Thoron Framework is a Linux post-exploitation framework that exploits Linux TCP vulnerability to provide a shell-like connection. Thoron Framework has the ability to create simple payloads to provide Linux TCP attack.

😎 Curated list about cryptocurrency security (reverse / exploit / fuzz..)

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

This repository contains full code examples from the book Gray Hat C#

PyJFuzz - Python JSON Fuzzer

A few SQL and XSS attack tools

swiss army knife for hackers

IoT 固件漏洞复现环境

Faraday introduces a new concept - IPE (Integrated Penetration-Test Environment) a multiuser Penetration test IDE. Designed for distributing, indexing, and analyzing the data generated during a security audit.

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

Go Web Application Penetration Test

Apache Shiro 反序列化漏洞检测与利用工具

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

iblessing is an iOS security exploiting toolkit, it mainly includes application information collection, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.

Fast web fuzzer written in Go

Proofs-of-concept

Generation-based, context-free grammar fuzzer.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Command line tool for testing CRLF injection on a list of domains.

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

This repository is primarily maintained by Omar Santos and includes thousands of resources related to ethical hacking / penetration testing, digital forensics and incident response (DFIR), vulnerability research, exploit development, reverse engineering, and more.

hack tools

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

Utilities for automated crash sample processing/analysis, easy afl-fuzz job management and corpus optimization

All releases of the security research group (a.k.a. hackers) The Hacker's Choice

An analysis tool for Python that blurs the line between testing and type systems.

my oscp prep collection

OSS-Fuzz - continuous fuzzing for open source software.

Command line helpers for fuzzing

Recent Fuzzing Paper

Exploiting Edge's read:// urlhandler

PoC exploit for CVE-2016-4622

Vulnerability Labs for security analysis

🐇 Fuzzing Rust code with American Fuzzy Lop

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

pentest framework

🤖 Repeat tests. Repeat tests. Repeat tests.

The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters

Here you can get full exploit for SAP NetWeaver AS JAVA

📖 Guides and tutorials on how to fuzz Rust code

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能