
gotestwaf
An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

Scanner to detect the presence of CVE-2025-55182 & CVE-2025-66478 on targeted web services.

SQL Injection Vulnerability Scanner made with Python

WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.

Automatic SQL injection and database takeover tool

Community curated list of templates for the nuclei engine to find security vulnerabilities.

Proof-of-concept scanner for the Optionsbleed vulnerability (CVE-2017-9798) that tests Apache HTTP servers for memory leak via HTTP OPTIONS method.

Community curated list of nuclei templates for finding "unknown" security vulnerabilities.

Python-based XSS vulnerability scanner with support for POST/GET requests, parameter injection in cookies/referer/user-agent, and multiple encoding…

BinGoo! A Linux bash based Bing and Google Dorking Tool

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths…

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines,…

The Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements.

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially…

Detection of the React Server Actions Exploit vector – CVE-2025-55182 / CVE-2025-66478

BoB Web Application Security Project

This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific…

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading