Tools for testing, exploiting, and securing web applications and APIs.
halencarjunior/grafana-cve-2021-43798Rust-based scanner for Grafana path traversal vulnerability (CVE-2021-43798). Checks hosts for the flaw and reads arbitrary files from affected…
fer1035_aws/cloudformation/cloudformation-waf-aclAn AWS CloudFormation template used to provision and manage AWS WAFv2 resources, including a Web ACL, managed rule groups, a custom regex pattern…
0xsamy/cve-2022-26134Proof-of-concept exploit for CVE-2022-26134, an unauthenticated OGNL injection vulnerability in Atlassian Confluence Server and Data Center, enabling…
check-risk-waf/check-risk-wafCloud-based Web Application Firewall (WAF) providing L3/L7 protection against SQLi, XSS, DDoS, and bot attacks. Features AI assistant, anti-bot…
karma-syndicate/xcrack-python-tools-for-hackersPython Hacking Tool for Hackers And Spammers
r3dteam/casper-shellCasper@shell:~# is an enhanced, more user-friendly version of p0wny shell with many new features.
ilk-toolkit/ilk-toolkitA ToolKit that automatically installs & configures all the Tools needed to turn your Daily Driver Linux Distro into a Pentesting Machine
omar2535/graphqler☸The first ever dependency-aware GraphQL API testing tool!
functori/dev/gaiaGlobal API Integrity Assessor
pedrofbrm/apache-web-log-analysis-labBlue Team lab focused on analyzing Apache web access logs to detect directory brute forcing and web scanning activity.
yangyang-research/whale-sentinel-servicesThe Whale Sentinel Services
