841 Open source projects that are alternatives of or similar to Top25 Parameter

No description or website provided.

Central Processing Unit Information Gathering Tool

Selenium powered Python script to automate searching for vulnerable web apps.

SMTP and IMAP checker / cracker for mailpass combolists with a user-friendly GUI, automated inbox test and many more features.

A Tool for Domain Flyovers

Rustcat(rcat) - The modern Port listener and Reverse shell

Smart contract vulnerability detection using graph neural network (DR-GCN).

network visualization & vulnerability management/reporting

Leverage the ability of Terraform and AWS or GCP to distribute large security scans across numerous cloud instances.

Pentest/BugBounty progress control with scanning modules

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.

Misc. Public Reports of Penetration Testing and Security Audits.

Fast tool to extract all subdomains from crt.sh website. Output will be up to sub.sub.sub.subdomain.com with standard and advanced search techniques

[ Admin panel finder / Admin Login Page Finder ] ¢σ∂є∂ ву 👻 (❤-❤) 👻

all manner of wordlists

A collection of special paths linked to major web CVEs, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

整理一些内网常用渗透小工具

🤖 The Modern Port Scanner 🤖

SQLi-Hunter is a simple HTTP / HTTPS proxy server and a SQLMAP API wrapper that makes digging SQLi easy.

Reconky is an great Content Discovery bash script for bug bounty hunters which automate lot of task and organized in the well mannered form which help them to look forward.

Hundreds of Offensive and Useful Docker Images for Network Intrusion. The name says it all.

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Keyfinder🔑 is a tool that let you find keys while surfing the web!

An automated target reconnaissance pipeline.

Network Vulnerability Scanner

Erebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

anewer appends lines from stdin to a file if they don't already exist in the file. This is a rust version of https://github.com/tomnomnom/anew

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

This powershell script has got to run in remote hacked windows host, even for pivoting

The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.

PHP function tracker

Smart Contract Vulnerability Detection From Pure Neural Network to Interpretable Graph Feature and Expert Pattern Fusion (IJCAI-21 Accepted)

Framework for rapid development and reusable of security tools

Dynamic file detection tool based on crawler 基于爬虫的动态敏感文件探测工具

Reconness Agents Script

The Leading Security Assessment Framework for Android.

Comprehensive Web Based Phishing Suite for Rapid Deployment and Real-Time Alerting!

An extensible toolkit providing penetration testers an easy-to-use platform to deploy Access Points during penetration testing and red team engagements.

AWS Identity and Access Management Visualizer and Anomaly Finder

Open-Source Ransomware As A Service for Linux, MacOS and Windows

Smart Contract Vulnerability Detection Using Graph Neural Networks (IJCAI-20 Accepted)

Nuubi Tools (Information-ghatering|Scanner|Recon.)

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Web Pentesting Fuzz 字典,一个就够了。

Docker image for Osmedeus, a fully automated offensive security tool for reconnaissance and vulnerability scanning

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

A simple wrapper for C# tools

A Collection of Notes, Checklists, Writeups on Bug Bounty Hunting and Web Application Security.

Enumerate and decrypt TeamViewer credentials from Windows registry

This is a multi-use bash script for Linux systems to audit wireless networks.

Para pencari bug / celah kemanan bisa bergabung.

Port scanning and domain utility.

HTTP fuzzer engine security oriented

PoC Command and Control Server. Interact with clients through a private web interface, add new users for team sharing and more.

A standalone python script which utilizes python's built-in modules to enumerate SUID binaries, separate default binaries from custom binaries, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ( ͡~ ͜ʖ ͡°)

A list of interesting payloads, tips and tricks for bug bounty hunters.

Good resources about web security that I have read.