
nuclei
Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Web vulnerability scanner written in Python3


Automatic SQL injection and database takeover tool

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

Fast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

A fast, simple, recursive content discovery tool written in Rust.

Self-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

Automatic SSTI detection tool with interactive interface

Unofficial frida extension for VSCode

A next-generation crawling and spidering framework.

Scriptable debugger for Android Dalvik VM using JDWP/DDM interfaces to hook methods, inspect process state, and modify runtime behavior without…

The ARTful library for dynamically modifying the Android Runtime
