authz0
hahwul/authz0Automated authorization testing tool that detects unauthorized access by scanning URLs with role-based credentials using YAML templates.
api-security-testingvulnerability-scannersweb-security
hahwul/authz0Automated authorization testing tool that detects unauthorized access by scanning URLs with role-based credentials using YAML templates.
hhhrrrttt222111/dorkifyAutomated Google Dorking tool for OSINT reconnaissance, vulnerability discovery, and information gathering via advanced search operators and targeted…
sech0us3/waf-checkerAutomated WAF assessment tool that detects firewall vendors, tests 19 attack categories with advanced evasion payloads, and provides color-coded…
google/aura-inspectorAutomated security testing tool for Salesforce Experience Cloud that discovers misconfigured Aura applications, accessible records, and unauthorized…
fricciolosa-red-team/evildorkAutomated Google dorking tool for extracting leaked secrets, personal information, and subdomains from a target domain or individual, outputting…
defparam/smugglerPython-based HTTP request smuggling and desync testing tool that detects CL.TE and TE.CL vulnerabilities using configurable mutation payloads and…
dodiorne/cve-2025-0133Automated reflected XSS detection tool for CVE-2025-0133 targeting Palo Alto Networks GlobalProtect portal login pages with HTML and JavaScript…
six2dez/reconftwreconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out…
lxf746/outlook-auto-registerAutomated Outlook account registration tool using pure HTTP protocol with PerimeterX captcha solving, proxy pool management, and email token…
nemesida-waf/waf-bypassAutomated WAF security testing tool that detects false positives and false negatives using 15+ payload categories including SQLi, XSS, RCE, and…
rapiddns/afuzzAutomated web path fuzzing tool that detects hidden directories, files, and endpoints using intelligent language detection, blacklist/whitelist…
dontpanico/jwtxploiterAutomated JWT security testing tool that exploits known CVEs, tampers with payloads, performs JKU/X5U injection, key confusion attacks, and verifies…
trufflesecurity/of-corsAutomated CORS misconfiguration discovery tool using typosquatting domains and browser service workers to probe internal networks of bug bounty…
subinacls/filibusterAutomated reconnaissance and information-gathering tool for penetration testing, designed to enumerate subdomains, endpoints, and network services.
cspf-founder/api-scanner-dockerAutomated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …
chaudharyarjun/jwtxposerAn advanced JWT extraction & decoding tool for bug bounty hunters! 🏴☠️
enablesecurity/wafw00fAutomated Web Application Firewall fingerprinting tool that identifies and detects over 200 WAF products by analyzing HTTP responses to normal and…
mordavid/bruteforceaiAdvanced LLM-powered brute-force tool combining AI intelligence with automated login attacks