
Jackalope
Fuzzer binário, guiado por cobertura, para Windows, macOS, Linux e Android

Fuzzer binário, guiado por cobertura, para Windows, macOS, Linux e Android

A ferramenta de ataque de API one shot - encontra a URL da API a partir da raiz fornecida e simula os ataques automatizados

End-to-end agentic smart contract fuzzing and threat hunting

The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.

Evidence-oriented DAST scanner in Go that crawls web apps and APIs, then runs adaptive SQLi, XSS, RCE, SSRF, and auth checks with replayable proof.

Coleção curada de wordlists personalizadas para fuzzing, enumeração de DNS, descoberta de parâmetros e credenciais padrão, além de um gerador em Go…

A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI

An LLM-driven fuzzing pipeline powered by the GitHub Security Lab Taskflow Agent

REx@Skill - Habilidade de Execução de Engenharia Reversa Agêntica para descoberta de vulnerabilidades em binários

RCE detection and confirmation toolkit that tests URLs or captured HTTP requests for command injection, SSTI, blind and OOB paths, returning tiered…

Research code for red-teaming AI auto-mode monitors, including simulation evals, fuzzing, and monitor implementations for Claude Code and Codex…

Dynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.

Monorepo de segurança local no navegador com seis módulos para triagem de APK/IPA móvel, fuzzing DAST do lado do cliente, diretórios OSINT, pontuação…

Native HTTP/HTTPS interception proxy for penetration testers and bug bounty hunters with live request tampering, request replay, high-speed fuzzing,…

Scanner XSS baseado no XSStrike com funcionalidades personalizadas. Detecta vulnerabilidades XSS em aplicações web.

Artefatos semelhantes a correções com defeitos incorporados

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

Exhaustive differential validation of all 4.3B AArch64 instruction encodings.