apex
pensarai/apexAI-powered offensive security testing using autonomous agents, directly in your terminal.
reconnaissancevulnerability-scannersexploit-frameworks+7
Tools for testing, exploiting, and securing web applications and APIs.
pensarai/apexAI-powered offensive security testing using autonomous agents, directly in your terminal.
khashashin/ogiOpen Source Link Analysis & OSINT Framework
tarihub/blackjumpJumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
mplsllc/macsurfA modern web browser for Classic Mac OS 9 PowerPC. Real CSS3, ES5 JavaScript, native HTTPS. Built with CodeWarrior on the Carbon API.
ivan-sincek/forbiddenBypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.
elttam/semgrep-rulesStatic analysis security rules for vulnerability detection and audit-focused code review across Java, Go, Python, C#, Kotlin, PHP, Kubernetes, and…
b3rito/peekopeeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.
t3l3machus/pentest-pivotingA compact guide to network pivoting for penetration testings / CTF challenges.
bambish/scanqliSQLi scanner to detect SQL vulns
thumpbo/cve-2025-30208-expCVE-2025-30208-EXP
takito1812/log4j-detectSimple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading
agent-field/sec-afAI-native code security auditor on AgentField that proves exploitability with verdicts, traces, and actionable evidence.
wavestone-cdt/wavecrackWavestone's web interface for password cracking with hashcat
owasp/owasp-istgThe IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility to adapt…
n4xh4ck5/cmssc4nTool to identify if a domain is a CMS such as Wordpress, Moodle, Joomla, Drupal or Prestashop
