akto
akto-api-security/aktoOpen-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…
api-securityapi-security-testingdevsecops+2
1.5k
akto-api-security/aktoOpen-source API security platform for continuous API discovery, vulnerability testing, and runtime threat detection. Integrates with CI/CD pipelines…
hahwul/dalfoxFast XSS scanner with parameter analysis, WAF fingerprinting, and DOM/AST verification. Supports reflected, stored, and DOM-based XSS detection via…
beelzebub-labs/beelzebubA secure low code deception runtime framework, leveraging AI for System Virtualization.
wpscanteam/wpscanWordPress security scanner that detects vulnerabilities, enumerates plugins/themes/users, and checks for weak passwords. Integrates with the WPScan…
open-flaw/cve-2026-56848Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…
sullo/niktoPerl-based web server scanner that performs comprehensive vulnerability checks, CGI scanning, and server fingerprinting with customizable plugins and…
tracehound/tracehoundOperational security controls with forensic guarantees
oscerd/cve-2026-46592Reproducer for CVE-2026-46592 demonstrating SOAP operation redirection via operationName header injection in Apache Camel camel-cxf, enabling…
oscerd/cve-2026-46726Reproducer for CVE-2026-46726 demonstrating WebSocket header injection in Apache Camel camel-vertx-websocket enabling SSRF and property-placeholder…
cloudflare/security-audit-skillA coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
elyelysiox/recaptchaTechnical documentation and reverse engineering analysis of Google's reCAPTCHA anti-bot system, covering payload structure, obfuscation techniques,…
rajanagori/nightingaleMulti-architecture Docker toolkit for penetration testing with preconfigured tools for web, network, mobile, API, OSINT, and forensics. Features…
jaeles-project/jaelesThe Swiss Army knife for automated Web Application Testing
0xbigshaq/apatchyFuzzing Framework for Modules in Apache HTTPD Server
therealaleph/masterhttprelayvpn-rustFree DPI bypass tool using a Google Apps Script relay with TLS SNI concealment. Provides HTTP and SOCKS5 proxy, cross-platform desktop UI, and no…
narfindustries/http-gardenDifferential testing framework for HTTP implementations
hackmanit/tinjaCLI tool for automated detection of server-side and client-side template injection vulnerabilities across 44 template engines in 8 programming…
enablesecurity/wafw00fAutomated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…