Tools for testing, exploiting, and securing web applications and APIs.
0xdevalias/spartySparty - MS Sharepoint and Frontpage Auditing Tool [Unofficial]
theratpack/grails-javamelody-sample-appGrails sample application using the Javamelody 1.44 plugin to illustrate the CVE-2013-4378 vulnerability.
travelworld/cve_2013_3893_trigger.html
devoteam-cybertrust/cve-2013-3319metasploit module for CVE-2013-3319 / SAP Security Note 1816536
jtripper/sslnukeTransparent proxy that decrypts SSL traffic and prints out IRC messages.
opensecurityresearch/flash-xdomain-xploitActionScript Proof of Concept to perform cross-domain reads
gursev/flash-xdomain-xploitActionScript Proof of Concept to perform cross-domain reads
ikotler/hackershA free and open source command-line shell and scripting language designed especially for security testing
raz0r/burp-radamsaRadamsa fuzzer extension for Burp Suite
steponequit/cve-2013-1081Novell ZENworks Mobile Management - LFI RCE
infobyte/isr-sqlgetISR-sqlget It's a blind SQL injection tool developed in Perl.
hood3drob1n/mysql-fu.rbMySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop…
bsodmike/rails-exploit-cve-2013-0156Bootstrapped Rails 3.2.10 to test the remote code exploit CVE-2013-0156