CredSniper
ustayready/credsniperCredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
phishing-toolsweb-application-exploitationphishing+2
1.4k
Tools for testing, exploiting, and securing web applications and APIs.
ustayready/credsniperCredSniper is a phishing framework written with the Python micro-framework Flask and Jinja2 templating which supports capturing 2FA tokens.
projectdiscovery/nuclei-burp-pluginBurp Suite plugin for generating and executing Nuclei vulnerability templates directly from HTTP requests and responses, with YAML auto-complete and…
umputun/reproxyLightweight edge HTTP(S) server and reverse proxy with automatic SSL, Docker/Consul discovery, per-route authentication, rate limiting, and…
hackmanit/web-cache-vulnerability-scannerGo-based CLI scanner for web cache poisoning and deception. Supports 10 poisoning techniques, multiple deception methods, built-in crawler, JSON…
graphenex/graphenexAutomated System Hardening Framework
rastating/wordpress-exploit-frameworkA Ruby framework designed to aid in the penetration testing of WordPress systems.
whitewidowscanner/whitewidowSQL Vulnerability Scanner
vigolium/vigoliumVigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
rhinosecuritylabs/cvesProof-of-Concept exploits for CVEs found by the team at Rhino Security Labs
xalgord/xalgorixAutonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
zealraj/cybersecurity-booksHere you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity…
ethicalhackingplayground/ssrf-kingSSRF plugin for burp Automates SSRF Detection in all of the Request
powerexploit/ashokAshok is a OSINT Recon Tool , a.k.a 😍 Swiss Army knife .
intrudir/bypassfuzzerFuzz 401/403/404 pages for bypasses
codextf2/burp2malleableQuick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
charlie-belmer/nosqliNoSql Injection CLI tool, for finding vulnerable websites using MongoDB.
brinhosa/apidetectorMulti-threaded scanner for detecting exposed Swagger/OpenAPI endpoints across web domains and subdomains, with automatic XSS detection, PoC…
dionach/phemailPhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test