#1Tools for testing, exploiting, and securing web applications and APIs.
Kitploit recommended
aliasrobotics/caiCybersecurity AI (CAI), the framework for AI Security
oj/gobusterDirectory/File, DNS and VHost busting tool written in Go
tennc/webshellThis is a webshell open source project
tencent/ai-infra-guardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.
opnsense/coreOPNsense GUI, API and systems backend
daffainfo/allaboutbugbountyAll about bug bounty (bypasses, payloads, and etc)
kingofbugbounty/kingofbugbountytipsOur main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are…
dstotijn/hettyAn HTTP toolkit for security research.
chaitin/xray一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档
commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.
ntfargo/relapse-exploitPS5 exploit chain for firmware 7.00-13.60 combining a WebKit JSC info leak and typedarray corruption with an aio_multi_wait UAF race for kernel…
x0rz/eqgrpDecrypted content of eqgrp-auction-file.tar.xz
olivierlaflamme/cheatsheet-godPenetration Testing Reference Bank - OSCP / PTP & PTX Cheatsheet
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
landgrey/springbootvulexploitSpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
fr0gger/awesome-gpt-agentsA curated list of GPT agents for cybersecurity
awarexone/agentic-bug-hunterAI-powered bug bounty hunting toolkit that works with or without subscription.
shuvonsec/claude-bug-bountyAI-powered bug bounty hunting toolkit that works with or without subscription.
