PwnedCheck
mohamedation/pwnedcheckA command-line tool to check if passwords have been exposed in data breaches using the Have I Been Pwned (HIBP) API.
api-securityencryption-decryption-toolspassword-cracking+3
3
mohamedation/pwnedcheckA command-line tool to check if passwords have been exposed in data breaches using the Have I Been Pwned (HIBP) API.
rajsidwadkar/uap-protocolA unified, security-first wire protocol for tool access and agent coordination. UAP eliminates CVE-2025-49596 and MCP tool-poisoning vulnerabilities…
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
owasp/threat-dragonAn open source threat modeling tool from OWASP
epi052/feroxbusterA fast, simple, recursive content discovery tool written in Rust.
ustayready/fireproxAWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation
s0md3v/arjunHTTP parameter discovery tool that finds valid query parameters for URL endpoints using a large dictionary, supporting GET/POST/JSON/XML requests,…
assetnote/kiterunnerHigh-speed API and web content discovery tool that bruteforces routes using compiled Swagger datasets, supporting depth scanning, custom wordlists,…
owasp/offatAutomated API security testing tool that generates tests from OpenAPI specs, fuzzes inputs, and checks for OWASP API Top 10 vulnerabilities including…
blst-security/cherrybombCLI tool that audits OpenAPI specifications, validates them against best practices, and runs automated security tests to detect vulnerabilities and…
dolevf/graphw00fGraphQL server engine fingerprinting tool that sends benign and malformed queries to identify backend technology and assess security defenses via the…
imperva/automatic-api-attack-toolImperva's customizable API attack tool takes an API specification as an input, generates and runs attacks that are based on it as an output.
boku7/azureoutlookc2Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox. Threat Emulation Tool for North…
cloudgraphdev/cliThe universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.
teycir/burpapisecuritysuiteBurp Suite extension for API security testing with 15 attack types, 108+ payloads, intelligent fuzzing, BOLA/IDOR detection, AI integration, and…
undeadsec/swaggerspyAutomated OSINT tool that scans SwaggerHub API documentation to discover exposed secrets, credentials, and sensitive information using regex-based…
lucky-luk3/grafikiThreat Hunting tool about Sysmon and graphs
blackfan/bfscanTool for finding URLs, paths, secrets and generating raw HTTP requests and OpenApi specifications from config files and annotations used in JAR / WAR…