
zaproxy
Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

Rogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…

Successor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…

Generate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…

Automates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…

Lightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.

ntlm relay attack to Exchange Web Services

Database Driven DNS Server with a Web UI

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

it is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page

an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant…

Web traffic interception simulation tool for cybersecurity research and defensive learning in isolated lab environments.

Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)

Self contained htaccess shells and attacks

PLEASE USE NEW VERSION: https://github.com/kgretzky/evilginx2

Azure JWT Token Manipulation Toolset

Vajra is a UI-based tool with multiple techniques for attacking and enumerating in the target's Azure and AWS environment. It features an intuitive…

Flask-like routing framework for mitmproxy to intercept, modify, and spoof HTTP requests/responses. Enables rapid development of MITM scripts for…