PwnFox
yeswehack/pwnfoxFirefox/Burp extension for security audits with single-click proxy, container profiles, postMessage logging, JS injection toolbox, and security…
penetration-testingweb-proxies-interceptionweb-security
yeswehack/pwnfoxFirefox/Burp extension for security audits with single-click proxy, container profiles, postMessage logging, JS injection toolbox, and security…
projectdiscovery/nucleiNuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling…
topjohnwu/magiskAndroid customization suite providing root access (MagiskSU), systemless module installation, boot image unpacking/repacking, and Zygisk runtime code…
keygraphhq/shannonShannon is an autonomous, white-box AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes…
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
konloch/bytecode-viewerA Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
hahwul/mzap⚡️ Multiple target ZAP Scanning
csploit/androidcSploit - The most complete and advanced IT security professional toolkit on Android.
flipkart-incubator/astraAutomated Security Testing For REST API's
caido/caidoLightweight web proxy for intercepting, inspecting, and modifying HTTP traffic to audit web applications during penetration testing and bug bounty…
spectolabs/hoverflyLightweight service virtualization/ API simulation / API mocking tool for developers and testers
danops-1/gpt-agreement-paymentChatGPT Plus/Team/Pro 订阅协议端到端重放工具集 · hCaptcha 视觉求解器 · 反欺诈机制实证研究 / End-to-end protocol replay toolkit for ChatGPT Plus/Team/Pro subscription with…
saeidshirazi/awesome-android-securityA curated list of Android Security materials and resources For Pentesters and Bug Hunters
vigolium/vigoliumVigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision
ethicalhackingplayground/ssrf-kingSSRF plugin for burp Automates SSRF Detection in all of the Request
brinhosa/apidetectorMulti-threaded scanner for detecting exposed Swagger/OpenAPI endpoints across web domains and subdomains, with automatic XSS detection, PoC…
jonathanwilbur/cve-2018-19131Proof-of-Concept exploit of CVE-2018-19131: Squid Proxy XSS via X.509 Certificate
sn1r/mass-assignerAutomated tool to probe for mass assignment vulnerabilities by extracting parameters from one HTTP request and applying them to another, with support…