
Jackalope
Fuzzer binario guiado por cobertura para Windows, macOS, Linux y Android

Fuzzer binario guiado por cobertura para Windows, macOS, Linux y Android

La herramienta de ataque a API de un solo disparo: encuentra la URL de la API a partir de la raíz dada y simula los ataques automatizados

End-to-end agentic smart contract fuzzing and threat hunting

The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.

Evidence-oriented DAST scanner in Go that crawls web apps and APIs, then runs adaptive SQLi, XSS, RCE, SSRF, and auth checks with replayable proof.

Colección curada de wordlists personalizadas para fuzzing, enumeración DNS, descubrimiento de parámetros y credenciales por defecto, además de un…

A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI

An LLM-driven fuzzing pipeline powered by the GitHub Security Lab Taskflow Agent

REx@Skill - Habilidad de ejecución de ingeniería inversa agéntica para el descubrimiento de vulnerabilidades binarias

RCE detection and confirmation toolkit that tests URLs or captured HTTP requests for command injection, SSTI, blind and OOB paths, returning tiered…

Research code for red-teaming AI auto-mode monitors, including simulation evals, fuzzing, and monitor implementations for Claude Code and Codex…

Dynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.

Monorepo de seguridad local en el navegador con seis módulos para triaje de APK/IPA móviles, fuzzing DAST del lado del cliente, directorios OSINT,…

Native HTTP/HTTPS interception proxy for penetration testers and bug bounty hunters with live request tampering, request replay, high-speed fuzzing,…

Escáner XSS basado en XSStrike con características personalizadas. Detecta vulnerabilidades XSS en aplicaciones web.

Artefactos tipo Fix con defectos incrustados

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

Exhaustive differential validation of all 4.3B AArch64 instruction encodings.