CakeFuzzer
zigrin-security/cakefuzzerCake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific…
dynamic-analysis-sandboxingfuzzingpenetration-testing+4
104
zigrin-security/cakefuzzerCake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific…
rakutentech/jndi-ldap-test-serverA minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228.
roxanne_ardary/safeforgeSafeForge is an open-source mobile app hub built on GitLab that enables developers to build, upload, and share applications in a secure, AI-verified…
zemarkhos/cve-2025-55182-exploit-poc-scannerExploit tool for CVE-2025-55182 and CVE-2025-66478 in React Server Components and Next.js, featuring RCE gadgets, file read/write, OOB callbacks, and…
bhanunamikaze/cve-2026-2587-exploit-pocCVE-2026-2587 PoC validator for Eclipse GlassFish EL Injection RCE in the admin console gadget.jsf handler. Safe authenticated vulnerability scanner…
yezzfusl/cve_2023_38831_scannerThis Python application scans for the CVE-2023-38831 vulnerability in WinRAR.
alanbarret/cve-2019-18935Nuclei template and validation scripts for detecting CVE-2019-18935, a critical .NET deserialization RCE in Telerik UI for ASP.NET AJAX, with…
wish-i-was/femidaAutomated blind-xss search for Burp Suite
tophat-cloud/cumulusReal-time web application weakness monitoring SDK and scanner. Detects XSS, SQL injection, sensitive payloads, and code vulnerabilities via dynamic…
rxerium/cve-2025-4427-cve-2025-4428Detection for CVE-2025-4427 and CVE-2025-4428
e-m-b-a/embaEMBA - The firmware security analyzer
portswigger/http-request-smugglerBurp Suite extension for automated detection and exploitation of HTTP request smuggling vulnerabilities, supporting HTTP/1.1 and HTTP/2-downgrade…
spinkham/skipfishWeb application security scanner created by lcamtuf for google - Unofficial Mirror
ossillate-inc/packjStatic and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…
zaproxy/zap-hudThe ZAP Heads Up Display (HUD)
rubo77/log4j_checker_betaa fast check, if your server could be vulnerable to CVE-2021-44228
fcavallarin/domdigDOM XSS scanner for Single Page Applications
ostesayed/oste-meta-scanMulti-engine DAST scanner aggregating Nikto, ZAP, Nuclei, SkipFish, and Wapiti for automated web injection vulnerability detection with consolidated…