
APIHarvester
The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

The one shot API attacker tool - finds the API url from the given root simulate the automated attacks

Black-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…

Curated collection of cybersecurity tools featured in Black Hat Arsenal events.

EMBA - The firmware security analyzer

All the deals for InfoSec related software/tools this Black Friday

AFL + DynamoRIO = fuzzing binaries with no source code on Linux

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

Android security insights in full spectrum.

Black-box regex fuzzing tool that generates payloads to bypass input validations, discover normalizations, and evade WAFs in web applications.

Seemingly normal USB drive with a hidden security feature

Black-box input-stage purification defense that neutralizes backdoor attacks on object detectors via corruption, diffusion reconstruction, and DBSCAN…

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

All the deals for InfoSec related software/tools this Black Friday


Conference presentation slides

Multi platform toolkit for an interactive DNS shell commands exfiltration, by using DNS-Cat you will be able to execute system commands in shell mode…

Go load and stress testing tool with L7 HTTP and L4 raw TCP/UDP modes, multi-threaded workers, live rate graph, and a Windows GUI plus cross-platform…