
SSTImap
Automatic SSTI detection tool with interactive interface

Automatic SSTI detection tool with interactive interface

Pishi is a code coverage tool like kcov for macOS.

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

GraphQL server engine fingerprinting tool that sends benign and malformed queries to identify backend technology and assess security defenses via the…

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight…

Automated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…

Static Binary Instrumentation tool for Windows x64 executables

Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

A fast DOM based XSS vulnerability scanner with simplicity.

A tool for effective testing the binding layer of scripting languages

Instrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…

Runtime libc function auditor that detects file access race conditions and symlink vulnerabilities by hooking filesystem syscalls via LD_PRELOAD,…