#1Tools for testing, exploiting, and securing web applications and APIs.
Kitploit recommended
dwisiswant0/galerA fast tool to fetch URLs from HTML attributes by crawl-in.
a-d-team/grafanaexpA exploit tool for Grafana Unauthorized arbitrary file reading vulnerability (CVE-2021-43798), it can burst plugins / extract secret_key / decrypt…
a3h1nt/gimmeshFor pentesters who don't wanna leave their terminals.
mhils/honeyproxyThis project is now part of @mitmproxy.
gwen001/github-endpointsFind endpoints on GitHub.
d00movenok/htmlsmuggler✉️ HTML Smuggling generator&obfuscator for your Red Team operations
joshkar/x-reconA utility for detecting webpage inputs and conducting XSS scans.
landgrey/cve-2018-2894CVE-2018-2894 WebLogic Unrestricted File Upload Lead To RCE Check Script
aaronsvk/cve-2020-3956PoC exploit for VMware Cloud Director RCE (CVE-2020-3956)
forbiddenprogrammer/cve-2021-21315-pocCVE 2021-21315 PoC
kkirsche/cve-2017-10271Python and Metasploit exploit for Oracle WebLogic WLS-WSAT deserialization vulnerability (CVE-2017-10271) with detection scanning and remote code…
n4xh4ck5/rastleakTool to automatic leak information using Hacking with engine searches
abhishekkr/n00bratRemote Administration Toolkit (or Trojan) for POSiX (Linux/Unix) system working as a Web Service
bishopfox/imperva_gzip_waf_bypassExploit for Imperva Cloud WAF bypass using gzip Content-Encoding header to evade WAF rules on HTTP POST requests. Includes detection script and…
pwnwriter/kanha🦚 A web-app pentesting suite written in rust .
infosecn1nja/ycsmThis is a quick script installation for resilient redirector using nginx reverse proxy and letsencrypt compatible with some popular Post-Ex Tools…
tarihub/blackjumpJumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 / CVE-2023-42820 / RCE 2021
codingo/minesweeperA Burpsuite plugin (BApp) to aid in the detection of scripts being loaded from over 23000 malicious cryptocurrency mining domains (cryptojacking).
