NeuraLegion / broken_crystals

Related projects: ⓘ

• NeuraLegion / wafalyzer
  Web Application Firewall (WAF) Detector
  ☆33Updated last year
• intrigueio / intrigue-ident
  Application and Service Fingerprinting
  ☆131Updated last year
• secdec / attack-surface-detector-cli
  ☆72Updated 2 years ago
• NeuraLegion / brokencrystals
  A Broken Application - Very Vulnerable!
  ☆120Updated this week
• secdec / attack-surface-detector-zap
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆60Updated last year
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆198Updated last year
• clirimemini / Keye
  Keye is a reconnaissance tool that was written in Python with SQLite3 integrated. After adding a single URL, or a list of URLs, it will m…
  ☆100Updated 4 years ago
• postmodern / npm_scan
  Scans npmjs.org for npm packages that can be taken over
  ☆18Updated 2 years ago
• rahulunair / vulnerable-api
  This repository contains an example Python API that is vulnerable to several different web API attacks.
  ☆26Updated 5 years ago
• spyd3r / owasp-asvs-github
  ☆18Updated 4 years ago
• tomdev / teh_s3_bucketeers
  ☆270Updated 2 years ago
• tdr130 / assetnote
  Push notifications for passive DNS data
  ☆105Updated 8 years ago
• secdec / attack-surface-detector-burp
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆95Updated 9 months ago
• EdOverflow / megplus
  Automated reconnaissance wrapper — TomNomNom's meg on steroids. [DEPRECATED]
  ☆301Updated 5 years ago
• TyrantSec / Fuzzing
  Fuzzing Payloads to Assist in Web Application Testing.
  ☆165Updated 5 years ago
• wallarm / jwt-heartbreaker
  The Burp extension to check JWT (JSON Web Tokens) for using keys from known from public sources
  ☆121Updated 3 years ago
• doyensec / burpdeveltraining
  Material for the training "Developing Burp Suite Extensions – From Manual Testing to Security Automation"
  ☆344Updated 3 years ago
• szski / shapeshifter
  GraphQL security testing tool
  ☆113Updated 2 years ago
• shivsahni / NSBrute
  Python utility to takeover domains vulnerable to AWS NS Takeover
  ☆82Updated last year
• arkadiyt / ssrf_filter
  A ruby gem for defending against Server Side Request Forgery (SSRF) attacks
  ☆78Updated last year
• Fuzzapi / API-fuzzer
  API Fuzzer which allows to fuzz request attributes using common pentesting techniques and lists vulnerabilities
  ☆384Updated 7 years ago
• jobertabma / transformations
  ☆171Updated last year
• devoteam-cybertrust / burpcollaborator-docker
  This repository includes a set of scripts to install a Burp Collaborator Server in a docker environment, using a LetsEncrypt wildcard cer…
  ☆279Updated 2 months ago
• DevSlop / Pixi
  The Pixi module is a MEAN Stack web app with wildly insecure APIs!
  ☆110Updated last year
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆167Updated last year
• NotSoSecure / cloud-service-enum
  ☆222Updated 2 months ago
• ollseg / ttt-ext
  Chrome extension to aid in finding DOMXSS by simple taint analysis of string values.
  ☆82Updated 5 years ago
• Whitespots-OU / security-requirements-generator
  A small tool to help developers understand a huge set of security requirements from appsec teams
  ☆39Updated 2 years ago
• ReconJSON / ReconJSON
  ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.
  ☆102Updated 5 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆188Updated 4 years ago