Web Security

paradigmxyz/iron-proxy

An egress firewall for untrusted workloads.

manhnho/shellsum

A defense tool - detect web shells in local directories via md5sum

ytkoka/impersonate-proxy

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…

yeswehack/pwnfox

Firefox/Burp extension for security audits with single-click proxy, container profiles, postMessage logging, JS injection toolbox, and security…

mzfr/liffy

Local file inclusion exploitation tool

trimstray/the-book-of-secret-knowledge

A collection of inspiring lists, manuals, cheatsheets, blogs, hacks, one-liners, cli/web tools and more.

projectdiscovery/nuclei

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…

freelabz/secator

secator - the pentester's swiss knife

iamnihal/warf

Modular web application reconnaissance framework for automated subdomain enumeration, directory brute-forcing, and extraction of endpoints, JS URLs,…

1dayexploit/1day-archive

Technical deep-dives and root cause analyses of recently disclosed CVEs - reverse engineering patches, building proof-of-concepts, and documenting…

jsitech/jshielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

melonlonmeo/cve-2025-49132

Poc - CVE-2025-49132

hack-with-github/awesome-hacking

A collection of various awesome lists for hackers, pentesters and security researchers

browserbox/browserbox

💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.

p0dalirius/apachetomcatscanner

A python script to scan for Apache Tomcat server vulnerabilities.

davkharrr/cve-2026-19478-poc

Proof-of-concept exploit for unauthenticated remote code injection in GitLab's GraphQL API, using crafted queries to modify or delete public projects…

enaqx/awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things