
domain-protect
OWASP Domain Protect - prevent subdomain takeover

OWASP Domain Protect - prevent subdomain takeover


Orchestration component of purpleteam

Stage two containers

TLS checking component of purpleteam

Server scanning component of purpleteam

CLI component of purpleteam

Application scanning component of purpleteam

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and…

Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling

Terminal API client for HTTP, GraphQL and gRPC. Plain .http files you can diff and version, with workflows, mocks, profiling, tracing, OpenAPI…

Opensource, cross-platform and portable toolkit for automating routine processes when carrying out various works for testing!

Detects unauthenticated MLflow webhook SSRF (CVE-2026-64849) that accesses internal or cloud metadata services and leaks response details via…

Proof-of-concept exploit and advisory for CVE-2026-54356, a Budibase missing-authorization flaw that lets low-privilege users mint S3 pre-signed…


find sensitive data leaking from ServiceNow instances.