#1Fuzz testing, mutation-based, generation-based, and coverage-guided fuzzing tools.
Kitploit recommended
openrce/sulleyA pure-python fully automated and unattended fuzzing framework.
rust-fuzz/cargo-fuzzCargo subcommand for coverage-guided Rust fuzzing with libFuzzer: create and run fuzz targets, minimize failures and corpora, and report coverage.
ayoubfathi/leaky-pathsA collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could…
narfindustries/http-gardenDifferential testing framework for HTTP implementations
0xkayala/nucleifuzzerAutomated web vulnerability scanner combining URL discovery tools (ParamSpider, waybackurls, gauplus, hakrawler, katana) with Nuclei fuzzing…
keensecuritylab/binabsinspectorStatic binary vulnerability scanner using abstract interpretation on Ghidra Pcode. Detects CWE classes like buffer overflows, use-after-free, and…
flock4h/freewayWiFi Penetration Testing & Auditing Tool
google/oss-fuzz-genLLM powered fuzzing via OSS-Fuzz.
enovella/tee-reversingA curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices
m4n3dw0lf/pythempentest framework
spinkham/skipfishWeb application security scanner created by lcamtuf for google - Unofficial Mirror
repplus/rep-chromerep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks
bahaabdelwahed/killshotA Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
programa-stic/barf-projectBARF : A multiplatform open source Binary Analysis and Reverse engineering Framework
google/fuzzbenchFuzzBench - Fuzzer benchmarking as a service.
chrislockard/api_wordlistA wordlist of API names for web application assessments
pedrib/pocAdvisories, proof of concept files and exploits that have been made public by @pedrib.
