Tools

davkharrr/cve-2026-19478-poc

Proof-of-concept exploit for unauthenticated remote code injection in GitLab's GraphQL API, using crafted queries to modify or delete public projects…

infobyte/faraday

Open Source Vulnerability Management Platform

owasp/cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

alufers/mitmproxy2swagger

Automagically reverse-engineer REST APIs via capturing traffic

cipher387/api-s-for-osint

List of API's for gathering information about phone numbers, addresses, domains etc

ustayready/fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

harsh-bothra/learn365

This repository is about @harshbothra_'s 365 days of Learning Tweets & Mindmaps collection.

mukul975/cve-mcp-server

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan,…

h33tlit/secret-regex-list

List of regex for scraping secret API keys and juicy information.

momenbasel/keyfinder

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

censys/censys-python

An easy-to-use and lightweight API wrapper for Censys APIs.

watchdogsecurity/porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API…

undeadsec/swaggerspy

Automated OSINT tool that scans SwaggerHub API documentation to discover exposed secrets, credentials, and sensitive information using regex-based…

lsh123/xmlsec

XML Security Library

liodeus/swaggerhole

A python3 script searching for secret on swaggerhub